Filtered by vendor Maian
Subscriptions
Filtered by product Gallery
Subscriptions
Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2012-2405 | 2 Maian, Menalto | 2 Gallery, Gallery | 2024-11-21 | N/A |
Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113. | ||||
CVE-2012-1113 | 2 Maian, Menalto | 2 Gallery, Gallery | 2024-11-21 | N/A |
Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | ||||
CVE-2007-2076 | 1 Maian | 1 Gallery | 2024-11-21 | N/A |
PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only briefly in v1.0." |
Page 1 of 1.