RSS   Vulnerabilities for 'Gallery'   RSS

2012-04-22
 
CVE-2012-2405

CWE-310
 

 
Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113.

 
 
CVE-2012-1113

CWE-79
 

 
Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 
2007-04-17
 
CVE-2007-2076

CWE-Other
 

 
PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only briefly in v1.0."

 

 >>> Vendor: Maian 7 Products
Support
Gallery
Search
Weblog
Links
Guestbook
Recipe


Copyright 2024, cxsecurity.com

 

Back to Top