Page 5 of 45 results (0.003 seconds)

CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2007-4650

https://notcve.org/view.php?id=CVE-2007-4650

04 Sep 2007 — Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV and (b) Reupload modules. Múltiples vulnerabilidades no especificadas en Gallery anterior a 2.2.3 permite a atacantes (1) renombrar artículos, (2) leer y modificar propiedades de artículos, o (3) ver y reemplazar artículos mediante ve... • http://bugs.gentoo.org/show_bug.cgi?id=191587 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.5EPSS: 0%CPEs: 15EXPL: 0

CVE-2006-4030

https://notcve.org/view.php?id=CVE-2006-4030

16 Aug 2006 — Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs." Vulnerabilidad no especificada en el módulo de estadísticas en Gallery 1.5.1-RC2 y anteriores permite a atacantes remotos obtener información sensible a través de vectores de ataque desconocidos, relacionados con "dos bugs de exposición de archivos". • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285 •

CVSS: 9.1EPSS: 6%CPEs: 5EXPL: 1

CVE-2004-2124 – Gallery 1.3.x/1.4 - Remote Global Variable Injection

https://notcve.org/view.php?id=CVE-2004-2124

31 Dec 2004 — The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. • https://www.exploit-db.com/exploits/23599 •

CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 1

CVE-2003-1428

https://notcve.org/view.php?id=CVE-2003-1428

31 Dec 2003 — Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos. • http://www.securityfocus.com/archive/1/311161 •

CVSS: 6.1EPSS: 6%CPEs: 13EXPL: 1

CVE-2003-0614 – Gallery 1.2/1.3.x - Search Engine Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2003-0614

01 Aug 2003 — Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter. Vulnerabilidad en sitios cruzados en search.php de Gallery 1.1 a 1.3.4 permite a atacantes remotos insertar script web mediante el parámetro searchstring • https://www.exploit-db.com/exploits/22961 •