Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MenaltoGallery

13 matches found

CVE
CVE•added 2008/06/16 11:41 p.m.•51 views

CVE-2008-2722

Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive.

7.5CVSS6.4AI score0.00361EPSS
CVE
CVE•added 2008/01/17 2:0 a.m.•45 views

CVE-2007-6687

Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject arbitrary web script or HTML via crafted filenames to the (1) Core or (2) add-item modules; or via (3) HTTP PROPPATCH in the WebDAV module.

4.3CVSS5.5AI score0.0048EPSS
CVE
CVE•added 2008/08/12 7:41 p.m.•40 views

CVE-2008-3600

Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter within a modload action.

6.8CVSS6.9AI score0.00335EPSS
CVE
CVE•added 2008/01/17 2:0 a.m.•38 views

CVE-2007-6688

Unspecified vulnerability in the Installation application in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to "web-accessibility protection of the storage folder."

10CVSS6.2AI score0.01022EPSS
CVE
CVE•added 2008/01/17 2:0 a.m.•38 views

CVE-2007-6692

Open redirect vulnerability in Menalto Gallery before 2.2.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) Core and (2) print modules.

6.4CVSS6.3AI score0.0064EPSS
CVE
CVE•added 2008/06/16 11:41 p.m.•38 views

CVE-2008-2720

Cross-site scripting (XSS) vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) host and (2) path components of a URL.

4.3CVSS5.5AI score0.00475EPSS
CVE
CVE•added 2008/06/16 11:41 p.m.•38 views

CVE-2008-2721

Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain titles of hidden albums by attempting to add a new album to a hidden album.

5CVSS6.2AI score0.00516EPSS
CVE
CVE•added 2008/01/17 2:0 a.m.•37 views

CVE-2007-6686

The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller.

10CVSS6.6AI score0.0063EPSS
CVE
CVE•added 2008/01/17 2:0 a.m.•37 views

CVE-2007-6691

Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) "hotlink protection" in the URL rewrite module, (2) a WebDAV view in the WebDAV module, (3) a comment view in the Comment module, (4) unspecified "item information disclosure attacks" in the Cor...

10CVSS6.3AI score0.01135EPSS
CVE
CVE•added 2008/01/17 2:0 a.m.•36 views

CVE-2007-6690

The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact and attack vectors.

10CVSS6.4AI score0.00476EPSS
CVE
CVE•added 2008/01/17 2:0 a.m.•33 views

CVE-2007-6689

Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows attackers to execute arbitrary code via the (1) Core application or (2) MIME module.

7.5CVSS7.3AI score0.00732EPSS
CVE
CVE•added 2008/06/16 11:41 p.m.•30 views

CVE-2008-2723

embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."

5CVSS6.2AI score0.00516EPSS
CVE
CVE•added 2008/06/16 11:41 p.m.•30 views

CVE-2008-2724

Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password, which might allow remote attackers to bypass intended access restrictions.

5CVSS6.6AI score0.00287EPSS