Patchwire CVEs, their patch status, and feeds to follow them

CVE-2001-1234

No fix known EPSS 4%

Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.

Published 2002-06-25 · CVE record · OSV

Products: gallery_project gallery