Show filters
78 Total Results
Displaying 51-60 of 78
Sort by:
Attacker Value
Unknown
CVE-2008-0491
Disclosure Date: January 30, 2008 (last updated October 04, 2023)
SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter.
0
Attacker Value
Unknown
CVE-2006-4030
Disclosure Date: August 16, 2006 (last updated October 04, 2023)
Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs."
0
Attacker Value
Unknown
CVE-2006-1696
Disclosure Date: April 11, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Gallery before 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
0
Attacker Value
Unknown
CVE-2006-1219
Disclosure Date: March 14, 2006 (last updated February 22, 2025)
Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files via ".." (dot dot) sequences in the stepOrder parameter to (1) upgrade/index.php or (2) install/index.php.
0
Attacker Value
Unknown
CVE-2006-1127
Disclosure Date: March 09, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album.
0
Attacker Value
Unknown
CVE-2006-1128
Disclosure Date: March 09, 2006 (last updated February 22, 2025)
Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized.
0
Attacker Value
Unknown
CVE-2006-1126
Disclosure Date: March 09, 2006 (last updated February 22, 2025)
Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTE_ADDR.
0
Attacker Value
Unknown
CVE-2006-0587
Disclosure Date: February 08, 2006 (last updated February 22, 2025)
Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file.
0
Attacker Value
Unknown
CVE-2006-0330
Disclosure Date: January 21, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).
0
Attacker Value
Unknown
CVE-2005-4023
Disclosure Date: December 05, 2005 (last updated February 22, 2025)
Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors.
0
