Description
Unrestricted file upload vulnerability in gallery.php in phpx 3.5.15 allows remote attackers to upload and execute arbitrary PHP scripts via an addImage action, which places scripts into the gallery/shelties/ directory.
References
- 20070319 phpx 3.5.15 multiples vulnerabilities mailing-list
- 2457 third-party-advisory
- 23033 vdb-entry
- phpx-gallery-file-upload(33151) vdb-entry