Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gallery project gallery 2.0.1 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2005-4023
Unspecified vulnerability in the zipcart module in Gallery 2.0 prior to 2.0.2 allows remote malicious users to read arbitrary files via unknown vectors.
Gallery Project Gallery 2.0Gallery Project Gallery 2.0 Rc1Gallery Project Gallery 2.0 Rc2Gallery Project Gallery 2.0 Alpha4Gallery Project Gallery 2.0 Beta1Gallery Project Gallery 2.0 Beta2Gallery Project Gallery 2.0 Beta3Gallery Project Gallery 2.0.1Gallery Project Gallery 2.0 Alpha3
445
VMScore
CVE-2005-4021
The installer for Gallery 2.0 prior to 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote malicious users to obtain sensitive information.
Gallery Project Gallery 2.0 Beta1Gallery Project Gallery 2.0 Beta2Gallery Project Gallery 2.0 Alpha1Gallery Project Gallery 2.0 Alpha2Gallery Project Gallery 2.0 Rc2Gallery Project Gallery 2.0 Alpha3Gallery Project Gallery 2.0 Alpha4Gallery Project Gallery 2.0Gallery Project Gallery 2.0.1Gallery Project Gallery 2.0 Beta3Gallery Project Gallery 2.0 Rc1
435
VMScore
CVE-2006-1127
Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote malicious users to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album.
Gallery Project Gallery 2.0 AlphaGallery Project Gallery 2.0 Alpha1Gallery Project Gallery 2.0 Alpha2Gallery Project Gallery 2.0 Alpha3Gallery Project Gallery 2.0Gallery Project Gallery 2.0 Alpha4Gallery Project Gallery 2.0 Beta1Gallery Project Gallery 2.0.1Gallery Project Gallery 2.0.2Gallery Project Gallery 2.0 Beta2Gallery Project Gallery 2.0 Beta3
645
VMScore
CVE-2006-1128
Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote malicious users to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is san...
Gallery Project Gallery 2.0Gallery Project Gallery 2.0 Alpha4Gallery Project Gallery 2.0 Beta1Gallery Project Gallery 2.0 Beta2Gallery Project Gallery 2.0.1Gallery Project Gallery 2.0.2Gallery Project Gallery 2.0 Beta3Gallery Project Gallery 2.0 AlphaGallery Project Gallery 2.0 Alpha1Gallery Project Gallery 2.0 Alpha2Gallery Project Gallery 2.0 Alpha3
505
VMScore
CVE-2006-1219
Directory traversal vulnerability in Gallery 2.0.3 and previous versions, and 2.1 before RC-2a, allows remote malicious users to include arbitrary PHP files via ".." (dot dot) sequences in the stepOrder parameter to (1) upgrade/index.php or (2) install/index.php.
Gallery Project Gallery 2.0.3Gallery Project Gallery 2.0 AlphaGallery Project Gallery 2.0 Beta3Gallery Project Gallery 2.1 Rc1Gallery Project Gallery 2.0Gallery Project Gallery 2.0 Alpha3Gallery Project Gallery 2.0 Alpha4Gallery Project Gallery 2.0 Alpha1Gallery Project Gallery 2.0 Alpha2Gallery Project Gallery 2.1 Rc2Gallery Project Gallery 2.0.1Gallery Project Gallery 2.0.2Gallery Project Gallery 2.0 Beta1Gallery Project Gallery 2.0 Beta2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook