CVE-2003-1489

upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Weaknesses

CWE-287

Affected products

• Truegalerie (Truegalerie)

References

• http://marc.info/?l=vulnwatch&m=105128431109082&w=2
• http://secunia.com/advisories/8683