4 matches found
CVE-2006-3676: Undefined Security Weakness
admin/galleryadmin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types...
CVE-2006-2116: Undefined Security Weakness
planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/galleryadmin.php...
PlanetGallery - 'Gallery_admin.php' Authentication Bypass
source: https://www.securityfocus.com/bid/17753/info PlanetGallery is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. An attacker can exploit this issue to bypass authentication and gain admin access. Th...
PlanetGallery - Gallery_admin.php Authentication Bypass
PlanetGallery - Galleryadmin.php Authentication Bypass source: https://www.securityfocus.com/bid/17753/info PlanetGallery is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. An attacker can exploit this...