CVE-2001-1234
First published: Tue Oct 02 2001(Updated: )
Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gallery Project Gallery | =1.1 | |
| Gallery Project Gallery | =1.2 | |
| Gallery Project Gallery | =1.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- collector/nvd-historical
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/gallery project
- canonical/gallery project gallery
- version/gallery project gallery/1.1
- version/gallery project gallery/1.2
- version/gallery project gallery/1.2.1