CVE-2004-1408

critical

Description

The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and execute arbitrary files.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/18531

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1405

http://www.securityfocus.com/bid/11990

http://marc.info/?l=bugtraq&m=110323479715051&w=2

Details

Source: Mitre, NVD

Published: 2004-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00846

Detections

Analytics