CVE

Id
46937  
CVE No.
CVE-2010-4353  
Status
Candidate  
Description
Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.  
Phase
Assigned (20101130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
513135 46937 CVE-2010-4353 CONFIRM:http://gallery.menalto.com/gallery_3.0.1_released  View
513136 46937 CVE-2010-4353 BID:45964  View
513137 46937 CVE-2010-4353 URL:http://www.securityfocus.com/bid/45964  View
513138 46937 CVE-2010-4353 OSVDB:70628  View
513139 46937 CVE-2010-4353 URL:http://osvdb.org/70628  View
513140 46937 CVE-2010-4353 SECUNIA:43028  View
513141 46937 CVE-2010-4353 URL:http://secunia.com/advisories/43028  View
513142 46937 CVE-2010-4353 XF:gallery-extension-file-upload(64870)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37654 JVNDB-2010-003439 SiteEngine の comments.php における SQL インジェクションの脆弱性 SiteEngine の comments.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-4357 46937 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003439.html  View