Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2006-3676 | 1 Planet Concept | 1 Planetgallery | 2024-11-21 | 5.1 MEDIUM | N/A |
admin/gallery_admin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types. | |||||
CVE-2006-2116 | 1 Planet Concept | 1 Planetgallery | 2024-11-21 | 7.5 HIGH | N/A |
planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php. |