What’s Vulnerable › Vulnerabilities

CVE-2023-2776: code-projects Simple Photo Gallery unrestricted upload

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-17 · updated 2026-06-17
• Weakness: CWE-434

Description

A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-229282 is the identifier assigned to this vulnerability.

Affected products

• Simple Photo Gallery Project Simple Photo Gallery: 1.0

References

• https://gitee.com/zyz0103/system-vul/blob/master/Simple%20Photo%20Gallery%20In%20PHP%20With%20Source%20Code%20has%20file%20upload%20vulnerability.pdf
• https://vuldb.com/?ctiid.229282
• https://vuldb.com/?id.229282
• https://gitee.com/zyz0103/system-vul/blob/master/Simple%20Photo%20Gallery%20In%20PHP%20With%20Source%20Code%20has%20file%20upload%20vulnerability.pdf
• https://vuldb.com/?ctiid.229282
• https://vuldb.com/?id.229282

Get alerted when CVE-2023-2776 or the next vulnerability affects your stack