Vulnerabilities

TI-2012-02132 CVE-2012-2405 · GHSA-vh5f-mhcm-54fp

Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which…

MEDIUM 45

Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01185 Published 2012-04-22 No fix listed CWE-310

TI-2012-01019 CVE-2012-1113 · GHSA-p2fh-j5g5-72qx

Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01655 Published 2012-04-22 No fix listed CWE-79

TI-2007-01997 CVE-2007-2076 · GHSA-g5w4-p9fr-v4hr

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote…

LOW 33

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01722 Published 2007-04-18 No fix listed

Vulnerabilities

Filters

Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which…

Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in…

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote…