planetGallery versions 22.05.2006 and below have a flaw that allows administrators to create new galleries and upload images. Because of a vulnerable regular expression, he may also upload PHP scripts and thereby execute arbitrary commands with the privileges of PHP.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/48447/rt-sa-2006-006.txt
Source: https://packetstormsecurity.com/files/48447/rt-sa-2006-006.txt.html