Vulnerabilities > CVE-2007-2076 - Remote Security vulnerability in Maian Gallery 1.0

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
maian
NVD
Published: 2007-04-18
Updated: 2018-10-16

Summary

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only briefly in v1.0."

Vulnerable Configurations

Part Description Count
Application
Maian
1

References