Description
FOSS Gallery Admin 和 FOSS Gallery Public的processFiles.php中存在无限制文件上传漏洞，远程攻击者可以通过上传一个具有可执行扩展名的文件并通过向根目录下的文件提出一个直接请求来访问该文件，以执行任意代码。
FOSS Gallery 'processFiles.php' 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/6680
https://nvd.nist.gov/vuln/detail/CVE-2008-4509
https://cxsecurity.com/cveproduct/13981/foss_gallery/
https://vulnerability.circl.lu/vuln/CVE-2008-4509