Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

gallery project gallery 1.4 pl1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-4030
Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and previous versions allows remote malicious users to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs."
Gallery Project Gallery 1.4.3 Pl2Gallery Project Gallery 1.4.4 Pl2Gallery Project Gallery 1.4 Pl1Gallery Project Gallery 1.5 Pl1Gallery Project Gallery 1.4.2Gallery Project Gallery 1.5.1Gallery Project Gallery 1.5Gallery Project Gallery 1.4.4 Pl3Gallery Project Gallery 1.4.1Gallery Project Gallery 1.4.3 Pl1Gallery Project GalleryGallery Project Gallery 1.4.4 Pl4Gallery Project Gallery 1.4.4 Pl5Gallery Project Gallery 1.4 Pl2Gallery Project Gallery 1.4
NA
CVE-2006-1696
Cross-site scripting (XSS) vulnerability in Gallery prior to 1.5.3 allows remote malicious users to inject arbitrary web script or HTML via unknown attack vectors.
Gallery Project Gallery 1.4.3 Pl2Gallery Project Gallery 1.4.4 Pl2Gallery Project Gallery 1.5.2 Pl2Gallery Project Gallery 1.4 Pl1Gallery Project Gallery 1.4.2Gallery Project Gallery 1.5.1Gallery Project Gallery 1.5Gallery Project Gallery 1.4.4 Pl3Gallery Project Gallery 1.5.2Gallery Project Gallery 1.4.1Gallery Project Gallery 1.5.1 Rc2Gallery Project Gallery 1.4.3 Pl1Gallery Project Gallery 1.4.4 Pl4Gallery Project Gallery 1.5.2 Rc2Gallery Project Gallery 1.4.4 Pl5Gallery Project Gallery 1.3.4Gallery Project Gallery 1.5.2 Rc3Gallery Project Gallery 1.5.2 Pl1Gallery Project Gallery 1.4 Pl2Gallery Project Gallery 1.4
NA
CVE-2006-0587
Unspecified vulnerability in util.php in Gallery prior to 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file.
Gallery Project Gallery 1.4.3 Pl2Gallery Project Gallery 1.4.4 Pl2Gallery Project Gallery 1.4 Pl1Gallery Project Gallery 1.4.2Gallery Project Gallery 1.5.1Gallery Project Gallery 1.5Gallery Project Gallery 1.4.4 Pl3Gallery Project Gallery 1.4.1Gallery Project Gallery 1.5.1 Rc2Gallery Project Gallery 1.4.3 Pl1Gallery Project Gallery 1.4.4 Pl4Gallery Project Gallery 1.5.2 Rc2Gallery Project Gallery 1.4.4 Pl5Gallery Project Gallery 1.3.4Gallery Project Gallery 1.4 Pl2Gallery Project Gallery 1.4
NA
CVE-2006-0330
Cross-site scripting (XSS) vulnerability in Gallery prior to 1.5.2 allows remote malicious users to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).
Gallery Project Gallery 1.4.3 Pl2Gallery Project Gallery 1.4.4 Pl2Gallery Project Gallery 1.4 Pl1Gallery Project Gallery 1.4.2Gallery Project Gallery 1.5.1Gallery Project Gallery 1.5Gallery Project Gallery 1.4.4 Pl3Gallery Project Gallery 1.4.1Gallery Project Gallery 1.5.1 Rc2Gallery Project Gallery 1.4.3 Pl1Gallery Project Gallery 1.4.4 Pl4Gallery Project Gallery 1.5.2 Rc2Gallery Project Gallery 1.4.4 Pl5Gallery Project Gallery 1.3.4Gallery Project Gallery 1.4 Pl2Gallery Project Gallery 1.4
NA
CVE-2005-2734
Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
Gallery Project Gallery 1.4.3 Pl2Gallery Project Gallery 1.4.4 Pl2Gallery Project Gallery 1.4 Pl1Gallery Project Gallery 1.4.2Gallery Project Gallery 1.5.1Gallery Project Gallery 1.5Gallery Project Gallery 1.4.4 Pl3Gallery Project Gallery 1.4.1Gallery Project Gallery 1.5.1 Rc2Gallery Project Gallery 1.4.3 Pl1Gallery Project Gallery 1.4.4 Pl4Gallery Project Gallery 1.4.4 Pl5Gallery Project Gallery 1.4 Pl2Gallery Project Gallery 1.4
NA
CVE-2004-1106
Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and previous versions allows remote malicious users to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php.
Gallery Project Gallery 1.4.3 Pl2Gallery Project Gallery 1.4 Pl1Gallery Project Gallery 1.4.2Gallery Project Gallery 1.4.1Gallery Project Gallery 1.4.3 Pl1Gallery Project Gallery 1.4 Pl2Gallery Project Gallery 1.4Gentoo Linux
NA
CVE-2004-0522
Gallery 1.4.3 and previous versions allows remote malicious users to bypass authentication and obtain Gallery administrator privileges.
Gallery Project Gallery 1.4 Pl1Gallery Project Gallery 1.4.2Gallery Project Gallery 1.4.1Gallery Project Gallery 1.4.3 Pl1Gallery Project Gallery 1.4 Pl2Gallery Project Gallery 1.4Debian Debian Linux 3.0
NA
CVE-2003-1227
PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote malicious users to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002...
Gallery Project Gallery 1.4 Pl1Gallery Project Gallery 1.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692CVE-2012-1823memory leakCVE-2024-0627CVE-2024-31402privilege escalationCVE-2024-36418remote code executionCVE-2024-27844
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook