2 results (0.005 seconds)

CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 3

CVE-2006-3676

https://notcve.org/view.php?id=CVE-2006-3676

21 Jul 2006 — admin/gallery_admin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types. admin/gallery_admin.php en planetGallery anterior a 14.07.2006 permite a atacantes remotos ejecutar código PHP de su elección a través de la actualización de archivos con una doble extensión y accedidos directamente en el directorio de ... • http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0434.html •

CVSS: 9.8EPSS: 4%CPEs: 1EXPL: 2

CVE-2006-2116 – PlanetGallery - 'Gallery_admin.php' Authentication Bypass

https://notcve.org/view.php?id=CVE-2006-2116

01 May 2006 — planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php. • https://www.exploit-db.com/exploits/27784 •