Page 5 of 45 results (0.008 seconds)

CVSS: 6.1EPSS: 0%CPEs: 14EXPL: 0

CVE-2005-2734

https://notcve.org/view.php?id=CVE-2005-2734

29 Aug 2005 — Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285 •

CVSS: 9.1EPSS: 6%CPEs: 5EXPL: 1

CVE-2004-2124 – Gallery 1.3.x/1.4 - Remote Global Variable Injection

https://notcve.org/view.php?id=CVE-2004-2124

31 Dec 2004 — The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. • https://www.exploit-db.com/exploits/23599 •

CVSS: 6.8EPSS: 1%CPEs: 8EXPL: 0

CVE-2004-1106

https://notcve.org/view.php?id=CVE-2004-1106

01 Dec 2004 — Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Gallery 1.4.4-pl3 y anteriores permite a atacantes remotos ejecutar script web o HTML de su elección mediante "URL s especialmente malformadas", posiblemente mediante un parámetro include en index.php • http://g3cko.info/gallery2-4.patch •

CVSS: 10.0EPSS: 3%CPEs: 18EXPL: 0

CVE-2004-0522

https://notcve.org/view.php?id=CVE-2004-0522

08 Jun 2004 — Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges. Gallery 1.4.3 y anteriores permite a atacantes remotos saltarse la autenticación y obtener privilegios de administrador de Gallery. • http://secunia.com/advisories/11752 •

CVSS: 9.8EPSS: 5%CPEs: 2EXPL: 3

CVE-2003-1227 – Gallery 1.4 - 'index.php' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2003-1227

31 Dec 2003 — PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation. • https://www.exploit-db.com/exploits/23238 • CWE-94: Improper Control of Generation of Code ('Code Injection') •