EUVD-2008-6878

Malware in sbrugna...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in galeria/...

CVE-2008-6918

Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in galeria/...

CVE-2008-6918

The Portal 2 (ThePortal2) version 2.2 is affected by an unrestricted file upload in admin/galeria.php, allowing remote attackers to execute arbitrary PHP code by uploading a file with an executable extension and triggering it via a direct request to the uploaded file in galeria/. The CVSS base sc...