CVE-2004-1466

The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using…

published February 13, 2005

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05233 · 92.5th percentile
Published
2005-02-13T05:00Z
EPSS history
Timeline
  • 13 FEB 05:00Z
    The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using…
    cvelistv5