| Package | Affected versions | Patched versions |
|---|---|---|
| crafty syntax image gallery | ≤ 3.1g |
newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows remote authenticated users to upload and execute arbitrary PHP code via a multipart/form-data POST with a .jpg filename in the fullimage parameter and the ext parameter set to .php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free