Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

menalto gallery 2.1 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2008-2720
Cross-site scripting (XSS) vulnerability in Menalto Gallery prior to 2.2.5 allows remote malicious users to inject arbitrary web script or HTML via the (1) host and (2) path components of a URL.
Menalto Gallery 2.2.2Menalto Gallery 2.2.3Menalto Gallery 2.1Menalto GalleryMenalto Gallery 2.1.1Menalto Gallery 2.1.2Menalto Gallery 2.2.0Menalto Gallery 2.2.1
5
CVSSv2
CVE-2008-2721
Unspecified vulnerability in the album-select module in Menalto Gallery prior to 2.2.5 allows remote malicious users to obtain titles of hidden albums by attempting to add a new album to a hidden album.
Menalto Gallery 2.2.2Menalto Gallery 2.2.3Menalto GalleryMenalto Gallery 2.1Menalto Gallery 2.1.1Menalto Gallery 2.1.2Menalto Gallery 2.2.0Menalto Gallery 2.2.1
5
CVSSv2
CVE-2008-2723
embed.php in Menalto Gallery prior to 2.2.5 allows remote malicious users to obtain the full path via unknown vectors related to "spoofing the remote address."
Menalto Gallery 2.2.0Menalto Gallery 2.2.1Menalto Gallery 2.2.2Menalto Gallery 2.2.3Menalto GalleryMenalto Gallery 2.1Menalto Gallery 2.1.1Menalto Gallery 2.1.2
7.5
CVSSv2
CVE-2008-2722
Menalto Gallery prior to 2.2.5 allows remote malicious users to bypass permissions for sub-albums via a ZIP archive.
Menalto Gallery 2.2.1Menalto Gallery 2.2.2Menalto Gallery 2.2.3Menalto GalleryMenalto Gallery 2.1Menalto Gallery 2.1.1Menalto Gallery 2.1.2Menalto Gallery 2.2.0
5
CVSSv2
CVE-2008-2724
Menalto Gallery prior to 2.2.5 does not enforce permissions for non-album items that have been protected by a password, which might allow remote malicious users to bypass intended access restrictions.
Menalto Gallery 2.2.0Menalto Gallery 2.2.1Menalto Gallery 2.2.2Menalto Gallery 2.2.3Menalto Gallery 2.1Menalto Gallery 2.2.4Menalto Gallery 2.1.1Menalto Gallery 2.1.2
6
CVSSv2
CVE-2010-4353
Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery prior to 3.0 and beta allows remote authenticated users with upload permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct ...
Menalto Gallery 2.1.1Menalto Gallery 1.6Menalto Gallery 2.1.2Menalto Gallery 1.5.7Menalto GalleryMenalto Gallery 2.2.2Menalto Gallery 2.1Menalto Gallery 2.2.4Menalto Gallery 2.2.0Menalto Gallery 2.2.3Menalto Gallery 2.2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook