StoreFront for Gallery *GALLERY_BASEDIR* File Inclusion Vulnerabilities Date: Wednesday, April 18, 2007 @ 00:29:44 CDT Topic: Security SECUNIA ADVISORY ID: SA24890 VERIFY ADVISORY: http://secunia.com/advisories/24890/ CRITICAL: Highly critical IMPACT: System access WHERE: >From remote SOFTWARE: StoreFront for Gallery - http://secunia.com/product/13957/ DESCRIPTION: Alkomandoz Hacker has reported a vulnerability in StoreFront for Gallery, which can be exploited by malicious people to compromise a vulnerable system. Input passed to the "GALLERY_BASEDIR" parameter in mods/business_functions.php and mods/ui_functions.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or external resources. Successful exploitation requires that "register_globals" is enabled. SOLUTION: Edit the source code to ensure that input is properly verified. PROVIDED AND/OR DISCOVERED BY: Alkomandoz Hacker ORIGINAL ADVISORY: http://milw0rm.com/exploits/3749 This article comes from Ravens PHP Scripts https://www.ravenphpscripts.com The URL for this story is: https://www.ravenphpscripts.com/modules.php?name=News&file=article&sid=2862