Elkagroup : Security Vulnerabilities, CVEs, (Code Execution)
Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in gallery/pictures/. NOTE: some of these details are obtained from third party information.
Max CVSS
6.5
EPSS Score
0.95%
Published
2009-04-27
Updated
2017-09-29
1 vulnerabilities found