CVE-2007-2145

The CVE-2007-2145 entry describes a remote PHP code execution in MiniGal b13. The vulnerability is in the imagecomments function of classes.php, which allows an attacker to inject arbitrary PHP code into a file in the thumbs/ directory through the input parameter. The CVSS v2.0 base score is 7.5 ...