CVE-2004-2124

The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP…

published May 27, 2005

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07353 · 94.4th percentile
Published
2005-05-27T04:00Z
EPSS history
Timeline
  • 27 MAY 04:00Z
    The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP…
    cvelistv5