PT-2011-1515

Name of the Vulnerable Software and Affected Versions Menantlo Gallery versions prior to 3.0 Description The issue allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the fi...

CVE-2010-4353: Undefined Security Weakness

Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...