VULNERABILITY INTELLIGENCE

CVE-2003-1489

CVSS score5 MEDIUM
EPSS probability0.90%
CISA KEVNot currently listed
Published2003-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery.

Weakness classification

  • CWE-287: Improper Authentication

Primary references