« Volver al listado

CVE-2010-4353

Estado: ModificadaMedia (6)—

Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Menalto — Gallery

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-4353",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-01-25T01:00:01.957",
  "references": [
    {
      "url": "http://gallery.menalto.com/gallery_3.0.1_released",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://osvdb.org/70628",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/43028",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/45964",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64870",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://gallery.menalto.com/gallery_3.0.1_released",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/70628",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/43028",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/45964",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64870",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de subida de archivos sin restricciones en modules/gallery/models/item.php en Menalto Gallery anterior a v3.0 y beta permite a usuarios autenticados de forma remota con permisos de subida ejecutar código de su elección subiendo un archivo con una extensión ejecutable, y después accediendo a él a través de una petición directa al archivo en un directorio no especificado."
    }
  ],
  "lastModified": "2026-06-16T23:24:37.537",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0E7A0A3-0A92-441A-89DE-102FC0A07549",
              "versionEndIncluding": "2.2.6"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:1.5.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CA96DC5-B3F3-42DD-801E-8B66D8065578"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE18E8EE-3B84-4A22-9D3C-EEE8AE793D85"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:1.6:alpha3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11DBDE20-1391-4E46-B659-31FAE4300987"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58BB4D3A-34F4-458B-9FB6-28D3B1156A53"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:2.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CD9940F-71D9-4AA5-B4C8-C464E371B982"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:2.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91B47B68-3C6B-4B49-87E4-35489CCAC050"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:2.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5373C47-DC8D-4DD9-B15E-707B79478928"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:2.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B86E3F23-A7E4-4BF1-AF08-84091490A530"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:2.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E64F4ECB-55CA-4B50-A23E-1C91217AD77F"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:2.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9E6E813-512A-43DD-AD45-0888F625BD6C"
            },
            {
              "criteria": "cpe:2.3:a:menalto:gallery:2.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78D73880-557C-40F6-8229-BE560321835E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "vendorComments": [
    {
      "comment": "This vulnerability is limited to versions of Gallery 3 including Gallery 3 betas and Gallery 3.0.   No versions of Gallery 1 or Gallery 2 are affected.",
      "lastModified": "2011-03-07T00:00:00",
      "organization": "menalto"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}