upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-10-24T23:00:00
Updated: 2024-08-08T02:28:03.652Z
Reserved: 2007-10-24T00:00:00
Link: CVE-2003-1489
Vulnrichment
No data.
NVD
Status : Modified
Published: 2003-12-31T05:00:00.000
Modified: 2024-11-20T23:47:16.723
Link: CVE-2003-1489
Redhat
No data.