bugtraq - Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 28 Oct 2005 23:39:08 -0000
From: preben@...chcom.no
To: bugtraq@...urityfocus.com
Subject: Vulnerability in MG2 php based Image Gallery - bypass security,
 view password protected images

The MG2 Image Gallery system has the ability to make create online galleries. Even password protected once.

By manipulating url from a gallery, you are able to list out all pictures in every gallery. Even though they are inside a password protected folder.

Sample manipulation could be:
www.yoursite.com/mg2/index.php?list=*&page=all

The "*" replaces the album number, showing every album.
The "all" command is an option programmed in the system to view all pictures within a SINGLE gallery.

Those two combined, will expose any password protected images.

The system can be downloaded from:
http://www.minigal.dk/

Please credit find to: Preben Nylokken