Signature Detail
Short Name |
HTTP:PHP:GALLERY:EMBED-AUTH |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Release Date |
2004/06/02 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Gallery Embedded USER AUTH Bypass
This signature detects attempts to exploit a known vulnerability in Gallery, a Web-based photo album application written in php. Attackers can bypass user authorization to gain administrative privileges.
Extended Description
Successful exploitation enables attackers to access to Gallery as an administrator and to perform any actions on any albums.
References