CVEvulnerability
CVE-2007-6689
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows attackers to execute arbitrary code via the (1) Core application or (2) MIME module.
Affected configurations
• menalto gallery (<= 2.2.3)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://bugs.gentoo.org/show_bug.cgi?id=203217 bugs.gentoo.org
- http://gallery.menalto.com/gallery_2.2.4_released Patch
- http://osvdb.org/41669 osvdb.org
- http://secunia.com/advisories/28898 secunia.com
- http://security.gentoo.org/glsa/glsa-200802-04.xml security.gentoo.org
- http://bugs.gentoo.org/show_bug.cgi?id=203217 bugs.gentoo.org
- http://gallery.menalto.com/gallery_2.2.4_released Patch
- http://osvdb.org/41669 osvdb.org
- http://secunia.com/advisories/28898 secunia.com
- http://security.gentoo.org/glsa/glsa-200802-04.xml security.gentoo.org