CVE-2006-3676

CVE-2006-3676 describes a critical vulnerability in planetGallery versions prior to 14.07.2006, where remote attackers can execute arbitrary PHP code. This is achieved by uploading files with a double extension, bypassing the application's regular expression-based file type validation, and then directly accessing the malicious file in the images directory. The vulnerability has a CVSS score of 5.1 (medium severity), indicating a network-based attack with high attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not currently a high-profile threat.