CVE-2006-3676
MEDIUM 5.1EPSS 1.7%
admin/gallery_admin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types.
- CVSS v2.0
- 5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P - EPSS
- 1.73% chance of exploitation in the next 30 days, 76th percentile
- Published
- 2006-07-21
- Updated
- 2024-08-07