medium5.0Public exploit code
CVE-2008-0260
minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to php_info.php, which calls the phpinfo function.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- minimal Gallery 0.8 - Remote File Disclosure2008-01-13 · webapps · php · Verified
Impact
minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to php_info.php, which calls the phpinfo function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Minimal Design | Minimal Gallery | Version 0.8 |