header-logo
Suggest Exploit
vendor:
mcGallery PRO
by:
Unknown
7.5
CVSS
HIGH
Input Validation
20
CWE
Product Name: mcGallery PRO
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: No
Related CWE:
CPE: a:mcgallery:mcgallery_pro
Metasploit:
Other Scripts:
Platforms Tested:
Unknown

Input Validation Vulnerabilities in mcGallery PRO

mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.Successful exploitation of these vulnerabilities could result in a compromise of the application, arbitrary local file inclusion and code execution, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks.

Mitigation:

Implement proper input validation and sanitization techniques in the application to prevent these vulnerabilities.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/15845/info

mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation of these vulnerabilities could result in a compromise of the application,arbitrary local file inclusion and code execution, disclosure or modification of data, the theft of cookie-based authentication credentials. They may also permit an attacker to exploit vulnerabilities in the underlying database implementation as well as other attacks. 


http://www.example.com/index.php?language=../FILE

Navigation

Suggest Exploit

Services By CQR