Detections
Analytics
my_gallery Plugin for e107 dload.php file Parameter Arbitrary File PHP Source Disclosure
medium Nessus Plugin ID 31650
Language:
Synopsis
The remote web server contains a PHP application that is affected by an information disclosure issue.Description
The version of My_Gallery, a third-party photo gallery plugin for e107, installed on the remote host allows an unauthenticated attacker to download arbitrary files from the affected host.Solution
Unknown at this time.See Also
Plugin Details
Severity: Medium
ID: 31650
File Name: e107_my_gallery_dload_info_disclosure.nasl
Version: 1.25
Type: remote
Family: CGI abuses
Published: 3/26/2008
Updated: 6/5/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Enable CGI Scanning: true
Risk Information
VPR
Risk Factor: Low
Score: 3.5
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
CPE: cpe:/a:e107:e107
Required KB Items: www/e107
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Vulnerability Publication Date: 3/25/2008
Reference Information
CVE: CVE-2008-1702
BID: 28440