freePHPgallery Cookie 'lang' Parameter Multiple Local File Include Vulnerabilities

Bugtraq ID:	27806
Class:	Input Validation Error
CVE:	CVE-2008-0818
Remote:	Yes
Local:	No
Published:	Feb 14 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	MhZ91 discovered these vulnerabilities.
Vulnerable:	freePHPgallery freePHPgallery 0.6
Not Vulnerable:

freePHPgallery Cookie 'lang' Parameter Multiple Local File Include Vulnerabilities

freePHPgallery is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these issues may allow an attacker to obtain potentially sensitive information and to run arbitrary local scripts in the context of the affected application.

These issues affect freePHPgallery 0.6; other versions may also be vulnerable.

freePHPgallery Cookie 'lang' Parameter Multiple Local File Include Vulnerabilities

Attackers can use readily available tools to exploit these issues.

freePHPgallery Cookie 'lang' Parameter Multiple Local File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

freePHPgallery Cookie 'lang' Parameter Multiple Local File Include Vulnerabilities

References:

• freePHPgallery Project Page (freePHPgallery)