CVE-2008-1988: Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery...

Security readout for executives and security teams

CVE-2008-1988 describes a file-upload flaw in EncapsGallery 2.0.2. An authenticated administrator could upload a PHP file and have the server run it. That can lead to full compromise of the web application host. The record notes the provenance is unknown and based on third-party information. Exposure is likely limited to legacy EncapsGallery 2.0.2 deployments where the administrative upload function is reachable. Risk increases if administrator credentials are shared, weak, compromised, or accessible over the internet. The bundle does not identify other affected versions. Treat this as high priority only if EncapsGallery 2.0.2 is present. The impact could be server-side code execution, but exposure is narrowed by administrator authentication and the age of the product. Prioritize inventory confirmation before emergency action. Mitigation focus: Identify any EncapsGallery 2.0.2 installations and owners.; Check archived vendor or maintainer guidance for a fixed release.; Restrict administrative access to trusted networks and users only..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.