CVE ID:	CVE-2003-1227
Description:	PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation.
Test IDs:	1.3.6.1.4.1.25623.1.0.11876
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2003-1227 BugTraq ID: 8814 http://www.securityfocus.com/bid/8814 Bugtraq: 20031011 Gallery 1.4 including file vulnerability (Google Search) http://www.securityfocus.com/archive/1/341044 Bugtraq: 20031011 RE: Gallery 1.4 including file vulnerability (Google Search) http://www.securityfocus.com/archive/1/341094 Bugtraq: 20031012 Re: Gallery 1.4 including file vulnerability (Google Search) http://www.securityfocus.com/archive/1/341098 XForce ISS Database: gallery-indexphp-file-include(13419) https://exchange.xforce.ibmcloud.com/vulnerabilities/13419