Lucene search
HistoryJan 05, 2007 - 11:28 a.m.
CVE-2007-0082
cve-2007-0082
imgallery
file upload vulnerability
php script execution
information security
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
89.0%
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload and execute arbitrary PHP scripts.
Affected configurations
Node
imgalleryimgalleryMatch2.4
ORimgalleryimgalleryMatch2.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| imgallery:imgallery | imgallery | eq | 2.4 |
| imgallery:imgallery | imgallery | eq | 2.5 |
Related
prion
prion
Code injection
2007-01-05 11:28:00
cvelist
cvelist
CVE-2007-0082
2007-01-05 11:00:00
nvd
nvd
CVE-2007-0082
2007-01-05 11:28:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
89.0%
Related for CVE-2007-0082