Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2006-4030

Disclosure Date: August 16, 2006 (last updated October 04, 2023)
Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs."
0
0
Attacker Value
Unknown

CVE-2006-1696

Disclosure Date: April 11, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Gallery before 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
0
0
Attacker Value
Unknown

CVE-2006-0587

Disclosure Date: February 08, 2006 (last updated February 22, 2025)
Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file.
0
0
Attacker Value
Unknown

CVE-2006-0330

Disclosure Date: January 21, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).
0
0
Attacker Value
Unknown

CVE-2005-2734

Disclosure Date: August 30, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
0
0
Attacker Value
Unknown

CVE-2004-1106

Disclosure Date: January 10, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php.
0
0
Attacker Value
Unknown

CVE-2004-0522

Disclosure Date: August 06, 2004 (last updated February 22, 2025)
Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
0
0