CVE-2008-1988 | BDVDB-2026-30422 Detail

Description#

Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file in the rwx_gallery directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/41949
http://secunia.com/advisories/29824
http://www.securityfocus.com/bid/28887

Exploit#

No public exploit known

History#

Version 12008-04-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.