NetSight
medium5.0

CVE-2003-1489

upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloadin…

Impact

upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery.

Affected products

VendorProductAffected versions
TruegalerieTruegalerie
Version 1.0

Weakness classification

References