Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Gallery Project GalleryXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter.

First published (updated )
CVE-2003-0614

Gallery Project GalleryGallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbit…

Risk 52
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERYBASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script.

First published (updated )
CVE-2002-1412

Gallery Project GalleryThe register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to…

Risk 26
Severity
5
AV:N/AC:L/Au:N/C:N/I:P/A:N

The registerglobals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTPPOSTVARS variable and conduct a PHP remote file inclusion attack via the GALLERYBASEDIR parameter, a different vulnerability than CVE-2002-1412.

First published (updated )
CVE-2004-2124

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203