CVE-2008-1988

no score yetEPSS 2.6%

encaps encapsgallery: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file in the rwx_gallery directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2008-04-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

encaps:encapsgallery

References

http://secunia.com/advisories/29824
http://www.securityfocus.com/bid/28887
https://exchange.xforce.ibmcloud.com/vulnerabilities/41949
http://secunia.com/advisories/29824
http://www.securityfocus.com/bid/28887

Check your stack JSON