gallery project gallery 2.0 alpha vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote malicious users to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is san...

Gallery Project Gallery 2.0.1 Gallery Project Gallery 2.0 Alpha4 Gallery Project Gallery 2.0 Beta2 Gallery Project Gallery 2.0.2 Gallery Project Gallery 2.0 Alpha Gallery Project Gallery 2.0 Beta1 Gallery Project Gallery 2.0 Alpha2 Gallery Project Gallery 2.0 Alpha1 Gallery Project Gallery 2.0 Beta3 Gallery Project Gallery 2.0 Gallery Project Gallery 2.0 Alpha3

1 EDB exploit

Directory traversal vulnerability in Gallery 2.0.3 and previous versions, and 2.1 before RC-2a, allows remote malicious users to include arbitrary PHP files via ".." (dot dot) sequences in the stepOrder parameter to (1) upgrade/index.php or (2) install/index.php.

Gallery Project Gallery 2.0.1 Gallery Project Gallery 2.0 Alpha4 Gallery Project Gallery 2.0 Beta2 Gallery Project Gallery 2.0.2 Gallery Project Gallery 2.0 Alpha Gallery Project Gallery 2.0 Beta1 Gallery Project Gallery 2.0 Alpha2 Gallery Project Gallery 2.0 Alpha1 Gallery Project Gallery 2.0.3 Gallery Project Gallery 2.1 Rc1 Gallery Project Gallery 2.0 Beta3 Gallery Project Gallery 2.1 Rc2 Gallery Project Gallery 2.0 Gallery Project Gallery 2.0 Alpha3

1 EDB exploit

main.php in Gallery 2.0 Alpha allows remote malicious users to gain sensitive information by changing the value of g2_subView parameter, which reveals the path in an error message.

Gallery Project Gallery 2.0 Alpha

Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote malicious users to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album.

Gallery Project Gallery 2.0.1 Gallery Project Gallery 2.0 Alpha4 Gallery Project Gallery 2.0 Beta2 Gallery Project Gallery 2.0.2 Gallery Project Gallery 2.0 Alpha Gallery Project Gallery 2.0 Beta1 Gallery Project Gallery 2.0 Alpha2 Gallery Project Gallery 2.0 Alpha1 Gallery Project Gallery 2.0 Beta3 Gallery Project Gallery 2.0 Gallery Project Gallery 2.0 Alpha3

1 EDB exploit

Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote malicious users to inject arbitrary web script or HTML via the g2_form[subject] field.

Gallery Project Gallery 2.0 Alpha

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook