Vulnerabilities > Photopost > Photopost Vbgallery

DATE CVE VULNERABILITY TITLE RISK
2009-08-26 CVE-2008-7088 Improper Input Validation vulnerability in Photopost Vbgallery 2.4.2
Unrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in a certain path.
network
low complexity
photopost CWE-20
6.5
2008-01-12 CVE-2008-0251 Improper Input Validation vulnerability in Photopost Vbgallery
Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via unknown vectors.
network
low complexity
photopost CWE-20
critical
10.0