Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Gallery Versions Prior to 2.2.4 Multiple Remote Vulnerabilities and Unspecified Weakness

Gallery is prone to multiple remote issues, including:

- An arbitrary-file-upload vulnerability
- A local file-include vulnerability
- Multiple cross-site scripting vulnerabilities
- Multiple information-disclosure vulnerabilities
- A security vulnerability that allows attackers to perform phishing attacks
- Multiple unspecified vulnerabilities
- An unspecified weakness

An attacker can exploit these issues to compromise the affected application, execute arbitrary code within the context of the webserver process, steal cookie-based authentication credentials, obtain sensitive information, and gain unauthorized access to the application. Other attacks are also possible.

These issues affect versions prior to Gallery 2.2.4.







 

Privacy Statement
Copyright 2009, SecurityFocus