Dacio's Image Gallery Multiple Remote Vulnerabilities

Bugtraq ID:	34906
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 11 2009 12:00AM
Updated:	May 11 2009 08:46PM
Credit:	ahmadbady
Vulnerable:	Dacio's Dacio's Image Gallery 1.6
Not Vulnerable:

Dacio's Image Gallery Multiple Remote Vulnerabilities

Dacio's Image Gallery is prone to multiple remote vulnerabilities:

- An arbitrary-file-upload vulnerability
- An authentication-bypass vulnerability
- A directory-traversal vulnerability

An attacker can exploit these issues to upload and execute arbitrary script code on an affected computer with the privileges of the webserver process, view arbitrary local files, or gain unauthorized access to the affected application.

Dacio's Image Gallery 1.6 is vulnerable; other versions may also be affected.

Dacio's Image Gallery Multiple Remote Vulnerabilities

Attackers may exploit these issues via a browser.

The following example URI for the directory-traversal vulnerability is available:

http://www.example.com/Dacio_imgGal-v1.6/index.php?gallery=../config.inc%00

Dacio's Image Gallery Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Dacio's Image Gallery Multiple Remote Vulnerabilities

References:

• Dacio's Image Gallery Homepage (kopica idej)