CVE-2010-4353 Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by....
MediumCVSS 6.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| menalto gallery | <= 2.2.6 | No fix listed |
| menalto gallery | = 1.5.7 | No fix listed |
| menalto gallery | = 1.6 | No fix listed |
| menalto gallery | = 1.6-alpha3 | No fix listed |
| menalto gallery | = 2.1 | No fix listed |
| menalto gallery | = 2.1.1 | No fix listed |
| menalto gallery | = 2.1.2 | No fix listed |
| menalto gallery | = 2.2.0 | No fix listed |
| menalto gallery | = 2.2.1 | No fix listed |
| menalto gallery | = 2.2.2 | No fix listed |
| menalto gallery | = 2.2.3 | No fix listed |
| menalto gallery | = 2.2.4 | No fix listed |
References
- gallery.menalto.com patch vendor-advisory
- 70628 vdb-entry
- 43028 third-party-advisory vendor-advisory
- 45964 patch vdb-entry
- gallery-extension-file-upload(64870) vdb-entry