CVE-2002-1412

None

CVSS

—

EPSS

39.5%

Published

Apr 11, 2003

CISA due date

—

The record

Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script.

Affected packages

Ecosystem	Package	Introduced	Fixed
Debian:3.0	gallery	0	1.2.5-7