CVE Tools
Track your stack

Gallery-project

26 CVEs tracked since 2002. Since Jun 2002, none of them reached CISA KEV.

Gallery-project CVEs per month

Jun 2002 to Aug 2006. Point at a month, or focus the strip and use the arrow keys.
Gallery-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2002-0610
2002-07null or fewer
2002-08null or fewer
2002-09null or fewer
2002-10null or fewer
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-02null or fewer
2003-03null or fewer
2003-04null or fewer
2003-05null or fewer
2003-06null or fewer
2003-07null or fewer
2003-0810
2003-09null or fewer
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-01null or fewer
2004-02null or fewer
2004-03null or fewer
2004-04null or fewer
2004-05null or fewer
2004-0610
2004-07null or fewer
2004-08null or fewer
2004-0910
2004-10null or fewer
2004-11null or fewer
2004-1210
2005-01null or fewer
2005-0250
2005-03null or fewer
2005-04null or fewer
2005-05null or fewer
2005-06null or fewer
2005-07null or fewer
2005-0840
2005-09null or fewer
2005-1010
2005-1110
2005-1220
2006-0110
2006-0210
2006-0340
2006-0410
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-0810

Products

The products that kept showing up in Gallery-project's monthly top three, with their CVEs summed over those months.

  1. Gallery2615 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Gallery-project.

  1. CVE-2012-4919Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability9.8
  2. CVE-2006-4030Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure ...5.0
  3. CVE-2006-1696Cross-site scripting (XSS) vulnerability in Gallery before 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.4.3
  4. CVE-2006-1219Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files via ".." (dot dot) sequences in the stepOrder parameter ...5.0
  5. CVE-2006-1127Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not ...4.3
  6. CVE-2006-1126Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is checked by Gallery before other more reliable sources ...6.4
  7. CVE-2006-1128Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a coo...6.4
  8. CVE-2006-0587Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via un...6.5
  9. CVE-2006-0330Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).4.3
  10. CVE-2005-4021The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.5.0
  11. CVE-2005-4023Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors.5.0
  12. CVE-2002-2130publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BASEDIR parameter to reference a URL on a remote web server that contains the code.7.5
  13. CVE-2005-3251Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.6.4
  14. CVE-2005-2734Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.4.3
  15. CVE-2005-2596User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries.4.6

The record

Peak rank
#22 in Mar 2006
Busiest month shown
Feb 2005, 5 CVEs
Months with a KEV entry
0 since Jun 2002
Monthly snapshots
15 since 2002
Gallery-project's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store