CVE-2008-6918: THEPORTAL2.PL THEPORTAL2

Medium severity, CVSS 6.8. EPSS: 4.2% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in galeria/.

Affected products

• THEPORTAL2.PL THEPORTAL2: version 2.2 only

Published 2009-08-10. Last modified 2026-06-16.