CVE-2009-3182: Anantasoft Gazelle CMS

Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in user/File/.

Affected products

• Anantasoft Gazelle CMS: version 1.0 only

Published 2009-09-11. Last modified 2026-06-16.