| Package | Affected versions | Patched versions |
|---|---|---|
| pixaria gallery | = 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.2= 1.2.1= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.4= 1.4.1= 1.4.2 |
Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free