CVE-2002-2123: High severity Gallery Project Gallery vulnerability
Published Dec 31, 2002
·Updated
PHP remote file inclusion vulnerability in publishxpdocs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERYBASEDIR parameter.
Affected Software
1 affected component
Gallery Project Gallery=1.3.2
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Aug 16, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2123?
CVE-2002-2123 is considered a high severity vulnerability due to its potential for arbitrary code execution by remote attackers.
2
How do I fix CVE-2002-2123?
To mitigate CVE-2002-2123, upgrade to a patched version of Gallery beyond 1.3.2 where the vulnerability is resolved.
3
What type of vulnerability is CVE-2002-2123?
CVE-2002-2123 is a remote file inclusion vulnerability that allows attackers to inject arbitrary PHP code.
4
Which software version is affected by CVE-2002-2123?
CVE-2002-2123 specifically affects Gallery version 1.3.2.
5
Can CVE-2002-2123 be exploited without authentication?
Yes, CVE-2002-2123 can be exploited remotely without the need for authentication.