PT-2007-3781 · Pixaria · Pixaria Gallery

Irvian

·

CVE-2007-2457

·

Published

2007-05-02

·

Updated

2024-02-14

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Pixaria Gallery versions prior to 1.4.3
Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base path] parameter in the resources/includes/class.Smarty.php file.
Recommendations For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2007-2457

Affected Products

Pixaria Gallery