CVE-2003-1489: Truegalerie

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery.

Affected products

• Truegalerie Truegalerie: version 1.0 only

Published 2003-12-31. Last modified 2026-06-16.