İçeriğe atla
Noroxi

gallery project kayıtları

gallery project üreticisine ait 29 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%27,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

29 kayıt
  • CVE-2002-1412
    42Planlayın

    Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    gallery project · gallery11 Nis 2003

  • CVE-2004-0522
    41Planlayın

    Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.

    KritikCVSS 10,0İstismar yokEPSS %2

    gallery project · gallery6 Ağu 2004

  • CVE-2012-4919
    40Planlayın

    Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %2

    gallery project · gallery22 Oca 2020

  • CVE-2003-1227
    32İzleyin

    PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, al

    YüksekCVSS 7,5Kavram kanıtıEPSS %6

    gallery project · gallery31 Ara 2003

  • CVE-2004-1466
    32İzleyin

    The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have bee

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    gallery project · gallery31 Ara 2004

  • CVE-2001-1234
    31İzleyin

    Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites

    YüksekCVSS 7,5İstismar yokEPSS %3

    gallery project · gallery2 Eki 2001

  • CVE-2002-2123
    31İzleyin

    PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by spe

    YüksekCVSS 7,5İstismar yokEPSS %2

    gallery project · gallery31 Ara 2002

  • CVE-2002-2130
    30İzleyin

    publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BASEDIR parameter to ref

    YüksekCVSS 7,5İstismar yokEPSS %1

    gallery project · gallery31 Ara 2002

  • CVE-2006-0587
    27İzleyin

    Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying store

    OrtaCVSS 6,5İstismar yokEPSS %2

    gallery project · gallery7 Şub 2006

  • CVE-2004-1106
    27İzleyin

    Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML vi

    OrtaCVSS 6,8İstismar yokEPSS %1

    gallery project · gallery10 Oca 2005

  • CVE-2006-1128
    26İzleyin

    Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote attackers to a

    OrtaCVSS 6,4Kavram kanıtıEPSS %4

    gallery project · gallery9 Mar 2006

  • CVE-2005-3251
    26İzleyin

    Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via "

    OrtaCVSS 6,4İstismar yokEPSS %1

    gallery project · gallery17 Eki 2005

  • CVE-2006-1126
    25İzleyin

    Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which

    OrtaCVSS 6,4İstismar yokEPSS %1

    gallery project · gallery9 Mar 2006

  • CVE-2004-2124
    22İzleyin

    The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and

    OrtaCVSS 5,0Kavram kanıtıEPSS %7

    gallery project · gallery31 Ara 2004

  • CVE-2006-1219
    21İzleyin

    Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files

    OrtaCVSS 5,0Kavram kanıtıEPSS %3

    gallery project · gallery13 Mar 2006

  • CVE-2005-0220
    20İzleyin

    Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the

    OrtaCVSS 5,0İstismar yokEPSS %1

    gallery project · gallery2 May 2005

  • CVE-2006-4030
    20İzleyin

    Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via u

    OrtaCVSS 5,0İstismar yokEPSS %1

    gallery project · gallery16 Ağu 2006

  • CVE-2005-0222
    20İzleyin

    main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView parameter, which rev

    OrtaCVSS 5,0İstismar yokEPSS %1

    gallery project · gallery2 May 2005

  • CVE-2005-4023
    20İzleyin

    Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vect

    OrtaCVSS 5,0İstismar yokEPSS %1

    gallery project · gallery5 Ara 2005

  • CVE-2005-4021
    20İzleyin

    The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows

    OrtaCVSS 5,0İstismar yokEPSS %1

    gallery project · gallery5 Ara 2005

  • CVE-2003-0614
    18İzleyin

    Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script v

    OrtaCVSS 4,3Kavram kanıtıEPSS %3

    gallery project · gallery27 Ağu 2003

  • CVE-2006-1127
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-F

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    gallery project · gallery9 Mar 2006

  • CVE-2006-0330
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown

    OrtaCVSS 4,3İstismar yokEPSS %1

    gallery project · gallery20 Oca 2006

  • CVE-2005-2734
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via

    OrtaCVSS 4,3İstismar yokEPSS %1

    gallery project · gallery30 Ağu 2005

  • CVE-2005-2596
    18İzleyin

    User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries.

    OrtaCVSS 4,6İstismar yokEPSS %0

    gallery project · gallery17 Ağu 2005