Vulnerabilities > CVE-2007-2145 - Remote Security vulnerability in Minigal B13
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The imagecomments function in classes.php in MiniGal b13 allows remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the input parameter. NOTE: some of these details are obtained from third party information.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | MiniGal b13 (image backdoor) Remote Code Execution Exploit. CVE-2007-2145,CVE-2007-2146. Webapps exploit for php platform |
file | exploits/php/webapps/3754.pl |
id | EDB-ID:3754 |
last seen | 2016-01-31 |
modified | 2007-04-17 |
platform | php |
port | |
published | 2007-04-17 |
reporter | Dj7xpl |
source | https://www.exploit-db.com/download/3754/ |
title | MiniGal b13 image backdoor Remote Code Execution Exploit |
type | webapps |