CVE-2010-5040

Description

PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIR_NUCLEUS parameter. NOTE: some of these details are obtained from third party information.

Weakness classification

• CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references

• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory