Description
Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions.
References
- http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=418266
- ADV-2006-1892 vdb-entry
- 20211 third-party-advisory
- coppermine-file-upload(26588) vdb-entry