CVE-2006-3676

PlanetGallery’s admin/gallery_admin.php contains a vulnerability that allows remote code execution via file uploads with a double extension, bypassing a safe-types regex and placing the file in the images directory. The flaw arises because the regex matches names like example.png.php, which PHP t...

CVE-2006-2116

CVE-2006-2116 concerns the planetGallery application. The vulnerability allows remote attackers to gain administrator privileges via a direct request to the file admin/gallery_admin.php. The available connected documents confirm planetGallery as the affected product and the specific administrativ...