Home > Vulnerability Database > CVE-2007-6689

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2007-6689

Date: January 16, 2008

Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows attackers to execute arbitrary code via the (1) Core application or (2) MIME module.

Severity Score

3.7

Related Resources (7)

Url: http://gallery.menalto.com/gallery_2.2.4_released

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-6689

Url: http://osvdb.org/41669

Url: http://bugs.gentoo.org/show_bug.cgi?id=203217

Url: http://security.gentoo.org/glsa/glsa-200802-04.xml

Url: http://secunia.com/advisories/28898

Url: https://www.mend.io/vulnerability-database/CVE-2007-6689

Severity Score

3.7

Weakness Type (CWE)

Input Validation

CWE-20

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us