VULNERABILITY INTELLIGENCE

CVE-2008-4509

CVSS score10 HIGH
EPSS probability7.66%
CISA KEVNot currently listed
Published2008-10-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the root directory.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references