My_eGallery < 3.1.1g Remote File Inclusion

high Nessus Plugin ID 11931

Language:

Synopsis

The remote web server is hosting a CGI application that is affected by a remote file inclusion vulnerability.

Description

The remote web server is hosting the 'my_egallery' PostNuke module. The installed version is potentially affected by a remote file include vulnerability because the application fails to properly sanitize input to include include statements.

An attacker may use this flaw to execute arbitrary code in the remote host and gain a shell with the privileges of the web server.

Solution

Upgrade to My_eGallery 3.1.1g or later as this reportedly fixes the issue.

Plugin Details

Severity: High

ID: 11931

File Name: my_egallery_cmd_exec.nasl

Version: 1.21

Type: remote

Family: CGI abuses

Published: 11/26/2003

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 11/26/2003

Reference Information

BID: 9113

Detections

Analytics