Page 40 of 218 results (0.020 seconds)

CVSS: 5.0EPSS: 0%CPEs: 9EXPL: 0

CVE-2005-4023

https://notcve.org/view.php?id=CVE-2005-4023

Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors. • http://secunia.com/advisories/17747 http://www.securityfocus.com/archive/1/418200/100/0/threaded http://www.securityfocus.com/bid/15614 http://www.vupen.com/english/advisories/2005/2681 •

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0

CVE-2005-3979

https://notcve.org/view.php?id=CVE-2005-3979

relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request. relocate_server.php en Coppermine Photo Gallery (CPG) 1.4.2 y 1.4 beta no se elimina después de la instalación y no usa autenticación, lo que permite a atacantes remotos obtener información sensible, como la configuración de la base de datos, a través de una petición directa. • http://coppermine-gallery.net/forum/index.php?topic=24217.0 http://secunia.com/advisories/17855 http://www.vupen.com/english/advisories/2005/2698 • CWE-287: Improper Authentication •

CVSS: 6.4EPSS: 1%CPEs: 8EXPL: 1

CVE-2005-3251

https://notcve.org/view.php?id=CVE-2005-3251

Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter. • http://dipper.info/security/20051012 http://gallery.menalto.com/gallery_2.0.1_released http://secunia.com/advisories/17205 http://securityreason.com/securityalert/88 http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.html •

CVSS: 4.3EPSS: 0%CPEs: 14EXPL: 0

CVE-2005-2734

https://notcve.org/view.php?id=CVE-2005-2734

Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285 http://marc.info/?l=bugtraq&m=112511025414488&w=2 http://secunia.com/advisories/16594 http://secunia.com/advisories/21502 http://securitytracker.com/id?1014800 http://sourceforge.net/project/shownotes.php?release_id=352576 http://www.securityfocus.com/bid/14668 http://www.us.debian.org/security/2006/dsa-1148 https://exchange.xforce.ibmcloud.com/vulnerabilities/22020 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 4

CVE-2005-2603 – My Image Gallery 1.4.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

https://notcve.org/view.php?id=CVE-2005-2603

Cross-site scripting (XSS) vulnerability in index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) currDir or (2) image parameters. • https://www.exploit-db.com/exploits/26153 http://secunia.com/advisories/16405 http://secwatch.org/advisories/secwatch/20050813_Mig.txt http://sourceforge.net/project/shownotes.php?release_id=349348 http://www.osvdb.org/18741 http://www.securityfocus.com/bid/14570 http://www.vupen.com/english/advisories/2005/1432 •