CVE-2010-4353

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-25 · updated 2026-06-16

Description

Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

Affected products

Menalto Gallery: through 2.2.6; 1.5.7, 1.6, 1.6-alpha3, 2.1, 2.1.1, 2.1.2 (+5)

References

http://gallery.menalto.com/gallery_3.0.1_released
http://osvdb.org/70628
http://secunia.com/advisories/43028
http://www.securityfocus.com/bid/45964
https://exchange.xforce.ibmcloud.com/vulnerabilities/64870
http://gallery.menalto.com/gallery_3.0.1_released
http://osvdb.org/70628
http://secunia.com/advisories/43028
http://www.securityfocus.com/bid/45964
https://exchange.xforce.ibmcloud.com/vulnerabilities/64870

Get alerted when CVE-2010-4353 or the next vulnerability affects your stack