Vulnerability in Gallery Project
CVE-2004-1466
The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root.
EPSS: 0.052 (91.7th percentile) — read the EPSS interpretation.
Affected products
- Gallery_project Gallery — versions 1.4.4
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO)
- cve@mitre.org (x_refsource_CONFIRM, Patch)