← Database

CVE-2002-1412

HIGH CVSS: 7.5 Published: 2003-04-11 Modified: 2026-06-16

Description

Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script.

Affected Platforms

Gallery Project Gallery

Weakness Type

NVD-CWE-Other

References