Show filters
44 Total Results
Displaying 41-44 of 44
Sort by:
Attacker Value
Unknown
CVE-2005-3251
Disclosure Date: October 17, 2005 (last updated February 22, 2025)
Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.
0
Attacker Value
Unknown
CVE-2005-0222
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView parameter, which reveals the path in an error message.
0
Attacker Value
Unknown
CVE-2005-0221
Disclosure Date: January 17, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field.
0
Attacker Value
Unknown
CVE-2004-2746
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
0
