NVD

Id
15608  
Name
CVE-2010-4353  
Description
Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2011-01-24  
Modified Date
2011-03-07  
Seq
2010-4353  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
88425 15608 CVE-2010-4353 http://gallery.menalto.com/gallery_3.0.1_released  View
88426 15608 CVE-2010-4353 45964  View
88427 15608 CVE-2010-4353 gallery-extension-file-upload(64870)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33666 JVNDB-2011-003908 Menalto Gallery の modules/gallery/models/item.php における任意コードを実行される脆弱性 Menalto Gallery の modules/gallery/models/item.php には、任意コードを実行される脆弱性が存在します。 CVE-2010-4353 46933 CVE-2010-4353 15608 6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003908.html 2011-01-24 2012-03-27 View