Description
Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php.
References
- 25455 vdb-entry
- 3079 third-party-advisory
- moongallery-admin-file-upload(36288) vdb-entry
- 26633 third-party-advisory
- 20070826 Moonware Software Multiple Vulnerabilities mailing-list