Vulnerabilities > CVE-2010-4353 - Unspecified vulnerability in Menalto Gallery

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
menalto
NVD
Published: 2011-01-25
Updated: 2024-11-21

Summary

Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

Vulnerable Configurations

Part Description Count
Application
Menalto
12

Statements

contributormenalto
lastmodified2011-03-07
organizationmenalto
statementThis vulnerability is limited to versions of Gallery 3 including Gallery 3 betas and Gallery 3.0. No versions of Gallery 1 or Gallery 2 are affected.

References