Gallery@1.3.3 Security Vulnerabilities and Issues — Gallery@1.3.3 CVE List

Lucene search

Gallery ProjectGallery1.3.3

2 matches found

CVE•added 2005/05/27 4:0 a.m.•56 views

CVE-2004-2124

The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.

5CVSS6.3AI score0.16272EPSS

CVE•added 2003/08/27 4:0 a.m.•45 views

CVE-2003-0614

Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter.

4.3CVSS5.7AI score0.06043EPSS