Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Gallery Project GalleryXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter.

First published (updated )
CVE-2003-0614

Gallery Project Gallerypublish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modify…

Risk 52
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

publishxpdocs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERYBASEDIR parameter to reference a URL on a remote web server that contains the code.

First published (updated )
CVE-2002-2130

Gallery Project GalleryPHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attac…

Risk 52
Severity
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

PHP remote file inclusion vulnerability in publishxpdocs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERYBASEDIR parameter.

First published (updated )
CVE-2002-2123

Gallery Project GalleryThe register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to…

Risk 26
Severity
5
AV:N/AC:L/Au:N/C:N/I:P/A:N

The registerglobals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTPPOSTVARS variable and conduct a PHP remote file inclusion attack via the GALLERYBASEDIR parameter, a different vulnerability than CVE-2002-1412.

First published (updated )
CVE-2004-2124

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203