high7.5
CVE-2004-1408
The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and …
Impact
The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and execute arbitrary files.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110323479715051&w=2
- http://www.securityfocus.com/bid/11990
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18531
- http://marc.info/?l=bugtraq&m=110323479715051&w=2
- http://www.securityfocus.com/bid/11990
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18531