Vulnerabilities

TI-2007-01420 CVE-2007-1478 · GHSA-wg9f-qvj8-h9vp

download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain…

LOW 28

download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the filename parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02623 Published 2007-03-16 No fix listed CWE-20

TI-2005-01889 CVE-2005-1998 · GHSA-8p69-hfjg-c7fw

Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers…

LOW 28

Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0307 Published 2005-06-20 No fix listed

TI-2005-01888 CVE-2005-1997 · GHSA-98vw-9c74-q7qj

show.php in McGallery 1.1 allows remote attackers to connect to arbitrary databases, or…

LOW 26

show.php in McGallery 1.1 allows remote attackers to connect to arbitrary databases, or gain sensitive information by triggering an error, via a modified host parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01425 Published 2005-06-20 No fix listed

Vulnerabilities

Filters

download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain…

Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers…

show.php in McGallery 1.1 allows remote attackers to connect to arbitrary databases, or…