Unrated severityNVD Advisory· Published Oct 2, 2001· Updated Apr 16, 2026
CVE-2001-1234
CVE-2001-1234
Description
Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.
Affected products
3cpe:2.3:a:gallery_project:gallery:1.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gallery_project:gallery:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:gallery_project:gallery:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:gallery_project:gallery:1.2.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.iss.net/security_center/static/7215.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/3397nvdExploitVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2001-10/0012.htmlnvd
- prdownloads.sourceforge.net/gallery/gallery-1.2.5.tar.gznvd
- www.osvdb.org/1967nvd
News mentions
0No linked articles in our index yet.