Iamma Nuke Simple Gallery 'upload.php ' Arbitrary File Upload Vulnerability

Bugtraq ID:	31873
Class:	Input Validation Error
CVE:	CVE-2008-6084
Remote:	Yes
Local:	No
Published:	Oct 22 2008 12:00AM
Updated:	Apr 16 2015 05:52PM
Credit:	X0r
Vulnerable:	Matteo Iamma Nuke Simple Gallery 2.0 Matteo Iamma Nuke Simple Gallery 1.0
Not Vulnerable:

Iamma Nuke Simple Gallery 'upload.php ' Arbitrary File Upload Vulnerability

Iamma Nuke Simple Gallery is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code on an affected computer with the privileges of the webserver process. The issue occurs because the application fails to sanitize user-supplied input.

Iamma Nuke Simple Gallery 1.0 and 2.0 are vulnerable; other versions may also be affected.

Iamma Nuke Simple Gallery 'upload.php ' Arbitrary File Upload Vulnerability

Attackers may exploit this issue via a browser.

Iamma Nuke Simple Gallery 'upload.php ' Arbitrary File Upload Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Iamma Nuke Simple Gallery 'upload.php ' Arbitrary File Upload Vulnerability

References:

• Iamma Nuke Simple Gallery Homepage (Matteo)