EUVD-2006-1130

Malware in sbrugna...

CVE-2006-5188

CVE-2006-5188 describes a directory traversal vulnerability in the download.php of the webGENEius GOOP Gallery 2.0.2. The vulnerability could allow remote attackers to read or list data from certain files or directories via unspecified vectors. The available sources (NVD/NVD detail, CVE listings)...

CVE-2006-5188

Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors...

Design/Logic Flaw

Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For XFORWARDEDFOR HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTEADDR...