CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.6. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2006-3608
Severity
MEDIUM
CVSS
4.6
EPSS
2.21%
Original NVD Description
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file.