Page 7 of 75 results (0.008 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-0220

https://notcve.org/view.php?id=CVE-2005-0220

06 Feb 2005 — Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field. • http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-0222

https://notcve.org/view.php?id=CVE-2005-0222

06 Feb 2005 — main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView parameter, which reveals the path in an error message. • http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 3

CVE-2005-0221

https://notcve.org/view.php?id=CVE-2005-0221

17 Jan 2005 — Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field. • http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html •

CVSS: 9.8EPSS: 10%CPEs: 1EXPL: 3

CVE-2004-1466 – Gallery 1.4.4 - Remote Server-Side Script Execution

https://notcve.org/view.php?id=CVE-2004-1466

31 Dec 2004 — The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root. • https://www.exploit-db.com/exploits/24383 •

CVSS: 9.1EPSS: 6%CPEs: 5EXPL: 1

CVE-2004-2124 – Gallery 1.3.x/1.4 - Remote Global Variable Injection

https://notcve.org/view.php?id=CVE-2004-2124

31 Dec 2004 — The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. • https://www.exploit-db.com/exploits/23599 •

CVSS: 6.8EPSS: 1%CPEs: 8EXPL: 0

CVE-2004-1106

https://notcve.org/view.php?id=CVE-2004-1106

01 Dec 2004 — Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Gallery 1.4.4-pl3 y anteriores permite a atacantes remotos ejecutar script web o HTML de su elección mediante "URL s especialmente malformadas", posiblemente mediante un parámetro include en index.php • http://g3cko.info/gallery2-4.patch •

CVSS: 10.0EPSS: 3%CPEs: 18EXPL: 0

CVE-2004-0522

https://notcve.org/view.php?id=CVE-2004-0522

08 Jun 2004 — Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges. Gallery 1.4.3 y anteriores permite a atacantes remotos saltarse la autenticación y obtener privilegios de administrador de Gallery. • http://secunia.com/advisories/11752 •

CVSS: 9.8EPSS: 5%CPEs: 2EXPL: 3

CVE-2003-1227 – Gallery 1.4 - 'index.php' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2003-1227

31 Dec 2003 — PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation. • https://www.exploit-db.com/exploits/23238 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 1

CVE-2003-1428

https://notcve.org/view.php?id=CVE-2003-1428

31 Dec 2003 — Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos. • http://www.securityfocus.com/archive/1/311161 •

CVSS: 6.1EPSS: 6%CPEs: 13EXPL: 1

CVE-2003-0614 – Gallery 1.2/1.3.x - Search Engine Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2003-0614

01 Aug 2003 — Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter. Vulnerabilidad en sitios cruzados en search.php de Gallery 1.1 a 1.3.4 permite a atacantes remotos insertar script web mediante el parámetro searchstring • https://www.exploit-db.com/exploits/22961 •