CVE-2012-10052

EGallery 1.2 - RCE

Title source: llm

Description

EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script. The application fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files directly into the web-accessible egallery/ directory. This results in full remote code execution under the web server context.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubywebappsphp

https://www.exploit-db.com/exploits/20029

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

by Sammy FORGIT, juan vazquez · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/egallery_upload_exec.rb

View Code ZIP pw:eip

References (5)

[Various Sources] http://web.archive.org/web/20170128123244/http://www.opensyscom.fr/Actualites/egallery-arbitrary-file-upload-vulnerability.html

[Various Sources] https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/egallery_upload_exec.rb

[Product] https://sourceforge.net/projects/e-gallery/

[Third Party Advisory] https://www.vulncheck.com/advisories/egallery-arbitrary-php-file-upload

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/20029

Scores

EPSS 0.7245

EPSS Percentile 98.7%

Classification

CWE

CWE-434

Status draft

Timeline

Published Aug 08, 2025

Tracked Since Feb 18, 2026