CVE-2010-4353

MEDIUM 6.0CVE-2010-4353 · Published 25/01/2011 · updated 16/06/2026

In short

CVE-2010-4353 is a MEDIUM (CVSS 6.0) vulnerability affecting gallery (menalto).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gallery menalto	`= 1.5.7= 1.6= 2.1= 2.1.1= 2.1.2= 2.2.0= 2.2.1= 2.2.2= 2.2.3= 2.2.4≤ 2.2.6`	No fix yet

Description

Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

References

gallery.menalto.com/gallery_3.0.1_released · Patch
osvdb.org/70628
secunia.com/advisories/43028 · Vendor Advisory
securityfocus.com/bid/45964 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/64870

More vulnerabilities in gallery

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gallery

menalto

= 1.5.7= 1.6= 2.1= 2.1.1= 2.1.2= 2.2.0= 2.2.1= 2.2.2= 2.2.3= 2.2.4≤ 2.2.6

No fix yet

Description

More vulnerabilities in gallery

See all →