CVE-2008-6084

CVE-2008-6084 affects Iamma Simple Gallery 1.0 and 2.0. An unrestricted file upload flaw in pages/download.php lets remote attackers upload a file with an executable extension and then access it under the uploads directory to execute PHP code. NVD lists a MEDIUM severity (CVSS v2 base score 6.8) ...