Unrated severityNVD Advisory· Published Jan 17, 2008· Updated Jun 16, 2026

CVE-2007-6689

Description

Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows attackers to execute arbitrary code via the (1) Core application or (2) MIME module.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Menalto/Gallery2 versions
cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:menalto:gallery:*:*:*:*:*:*:*:*range: <=2.2.3
- (no CPE)range: <2.2.4

Patches

Vulnerability mechanics

References

gallery.menalto.com/gallery_2.2.4_releasednvdPatch
bugs.gentoo.org/show_bug.cginvd
osvdb.org/41669nvd
secunia.com/advisories/28898nvd
security.gentoo.org/glsa/glsa-200802-04.xmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000