Gallery Security Vulnerabilities and Issues — Gallery CVE List

Lucene search

MenaltoGallery

4 matches found

CVE•added 2008/01/17 2:0 a.m.•45 views

CVE-2007-6687

Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject arbitrary web script or HTML via crafted filenames to the (1) Core or (2) add-item modules; or via (3) HTTP PROPPATCH in the WebDAV module.

4.3CVSS5.5AI score0.0048EPSS

CVE•added 2012/08/15 9:55 p.m.•39 views

CVE-2012-4342

Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.7AI score0.00254EPSS

CVE•added 2008/06/16 11:41 p.m.•38 views

CVE-2008-2720

Cross-site scripting (XSS) vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) host and (2) path components of a URL.

4.3CVSS5.5AI score0.00475EPSS

CVE•added 2012/04/22 6:55 p.m.•32 views

CVE-2012-1113

Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.5AI score0.00665EPSS