CVE-2008-0259

CVE-2008-0259 affects minimal Gallery 0.8. Vulnerability in the PHP file _mg/php/mg_thumbs.php allows remote attackers to read arbitrary files through a directory traversal using the parameters (1) thumbcat and (2) thumb. The underlying cause is improper handling of user-supplied paths, enabling ...

CVE-2008-0260

CVE-2008-0260 affects minimal Gallery 0.8. The issue is an information-disclosure vulnerability where an attacker can remotely obtain configuration information by requesting php_info.php, which invokes phpinfo. The exposed data could include server configuration details and environment settings. ...