CVE-2007-0082

Published: Jan 5, 2007Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload and execute arbitrary PHP scripts.

Affected (2)

Products: Imgallery: Imgallery

Imgallery

1 product

Imgallery

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Imgallery Imgallery	Version 2.4
Imgallery Imgallery	Version 2.5

References (8)

http://www.securityfocus.com/bid/21827

Source: cve@mitre.org

ExploitVendor Advisory

http://www.vupen.com/english/advisories/2007/0010

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/31237

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3049

Source: cve@mitre.org

http://www.securityfocus.com/bid/21827

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.vupen.com/english/advisories/2007/0010

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/31237

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/3049

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.