İçeriğe atla
Noroxi

menalto kayıtları

menalto üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    23 kayıt
    • CVE-2007-6691
      41Planlayın

      Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) "hotlink protection" in the URL rew

      KritikCVSS 10,0İstismar yokEPSS %2

      menalto · gallery16 Oca 2008

    • CVE-2007-6688
      41Planlayın

      Unspecified vulnerability in the Installation application in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to "

      KritikCVSS 10,0İstismar yokEPSS %1

      menalto · gallery16 Oca 2008

    • CVE-2007-6685
      40Planlayın

      Unspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers to create albums and upload files via unkno

      KritikCVSS 10,0İstismar yokEPSS %1

      menalto · gallery publish xp module16 Oca 2008

    • CVE-2007-6686
      40Planlayın

      The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors rel

      KritikCVSS 10,0İstismar yokEPSS %1

      menalto · gallery16 Oca 2008

    • CVE-2007-6690
      40Planlayın

      The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact a

      KritikCVSS 10,0İstismar yokEPSS %1

      menalto · gallery16 Oca 2008

    • CVE-2007-6693
      40Planlayın

      Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to a "proxied r

      KritikCVSS 10,0İstismar yokEPSS %1

      menalto · gallery webcam module16 Oca 2008

    • CVE-2012-2405
      40Planlayın

      Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a differe

      KritikCVSS 10,0İstismar yokEPSS %1

      maian · gallery22 Nis 2012

    • CVE-2013-2138
      31İzleyin

      The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows

      YüksekCVSS 7,5İstismar yokEPSS %2

      menalto · gallery9 Eki 2013

    • CVE-2007-6689
      31İzleyin

      Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows attackers to execute ar

      YüksekCVSS 7,5İstismar yokEPSS %2

      menalto · gallery16 Oca 2008

    • CVE-2013-2240
      31İzleyin

      lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecif

      YüksekCVSS 7,5İstismar yokEPSS %1

      menalto · gallery9 Eki 2013

    • CVE-2008-2722
      31İzleyin

      Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive.

      YüksekCVSS 7,5İstismar yokEPSS %1

      menalto · gallery16 Haz 2008

    • CVE-2012-4343
      30İzleyin

      Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors.

      YüksekCVSS 7,5İstismar yokEPSS %1

      menalto · gallery15 Ağu 2012

    • CVE-2008-3600
      28İzleyin

      Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register_globals is enabled, allows re

      OrtaCVSS 6,8İstismar yokEPSS %2

      menalto · gallery12 Ağu 2008

    • CVE-2007-6692
      26İzleyin

      Open redirect vulnerability in Menalto Gallery before 2.2.4 allows remote attackers to redirect users to arbitrary web sites and conduct phi

      OrtaCVSS 6,4İstismar yokEPSS %1

      menalto · gallery16 Oca 2008

    • CVE-2010-4353
      25İzleyin

      Unrestricted file upload vulnerability in modules/gallery/models/item.php in Menalto Gallery before 3.0 and beta allows remote authenticated

      OrtaCVSS 6,0İstismar yokEPSS %1

      menalto · gallery24 Oca 2011

    • CVE-2013-2241
      20İzleyin

      modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain se

      OrtaCVSS 5,0İstismar yokEPSS %1

      menalto · gallery9 Eki 2013

    • CVE-2008-2724
      20İzleyin

      Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password, which might allow remo

      OrtaCVSS 5,0İstismar yokEPSS %1

      menalto · gallery16 Haz 2008

    • CVE-2008-2721
      20İzleyin

      Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain titles of hidden albu

      OrtaCVSS 5,0İstismar yokEPSS %1

      menalto · gallery16 Haz 2008

    • CVE-2008-2723
      20İzleyin

      embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remot

      OrtaCVSS 5,0İstismar yokEPSS %1

      menalto · gallery16 Haz 2008

    • CVE-2007-6687
      18İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject arbitrary web script or

      OrtaCVSS 4,3İstismar yokEPSS %1

      menalto · gallery16 Oca 2008

    • CVE-2012-1113
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remot

      OrtaCVSS 4,3İstismar yokEPSS %1

      maian · gallery22 Nis 2012

    • CVE-2008-2720
      17İzleyin

      Cross-site scripting (XSS) vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary web script or HTML via

      OrtaCVSS 4,3İstismar yokEPSS %1

      menalto · gallery16 Haz 2008

    • CVE-2012-4342
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML

      OrtaCVSS 4,3İstismar yokEPSS %1

      menalto · gallery15 Ağu 2012