CVE-2007-1164

ALTO 7.5CVE-2007-1164 · Published 02/03/2007 · updated 16/06/2026

In breve

CVE-2007-1164 è una vulnerabilità ALTO (CVSS 7.5) che riguarda dbimagegallery (dbscripts).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 9.4%, superiore al 95.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dbimagegallery dbscripts	`= 1.2.2`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in DBImageGallery 1.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the donsimg_base_path parameter to (1) attributes.php, (2) images.php, or (3) scan.php in admin/; or (4) attributes.php, (5) db_utils.php, (6) images.php, (7) utils.php, or (8) values.php in includes/.

References

osvdb.org/34937
osvdb.org/34938
osvdb.org/34939
osvdb.org/34940
osvdb.org/34941
osvdb.org/34942
osvdb.org/34943
osvdb.org/34944
securityfocus.com/archive/1/461741/100/0/threaded
securityfocus.com/archive/1/462142/100/0/threaded
securityfocus.com/bid/22657 · Exploit
vupen.com/english/advisories/2007/0692
exchange.xforce.ibmcloud.com/vulnerabilities/32612
exploit-db.com/exploits/3353

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free