Vulnerabilities > CVE-2007-2146 - Remote Security vulnerability in Minigal B13

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
minigal
exploit available
NVD
Published: 2007-04-19
Updated: 2011-03-08

Summary

The imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the (1) name or (2) email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Configurations

Part Description Count
Application
Minigal
1

Exploit-Db

descriptionMiniGal b13 (image backdoor) Remote Code Execution Exploit. CVE-2007-2145,CVE-2007-2146. Webapps exploit for php platform
fileexploits/php/webapps/3754.pl
idEDB-ID:3754
last seen2016-01-31
modified2007-04-17
platformphp
port
published2007-04-17
reporterDj7xpl
sourcehttps://www.exploit-db.com/download/3754/
titleMiniGal b13 image backdoor Remote Code Execution Exploit
typewebapps

References