CVE-2007-6686 The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller.
HighCVSS 10.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| menalto gallery | <= 2.2.3 | No fix listed |
References
- bugs.gentoo.org
- gallery.menalto.com
- 41674 vdb-entry
- 28898 third-party-advisory
- GLSA-200802-04 vendor-advisory