EUVD-2007-2063

Malware in sbrugna...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute arbitrary PHP code via a URL in the GALLERYBASEDIR parameter to 1 mods/businessfunctions.php or 2 mods/uifunctions.php...

CVE-2007-2068

CVE-2007-2068 describes multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery. An attacker can supply a URL in the GALLERY_BASEDIR parameter to either mods/business_functions.php or mods/ui_functions.php, enabling remote code execution on the affected system. The d...