Gallery Versions Prior to 2.2.4 Multiple Remote Vulnerabilities and Unspecified Weakness

BID:27035

Info

Gallery Versions Prior to 2.2.4 Multiple Remote Vulnerabilities and Unspecified Weakness

Bugtraq ID: 27035
Class: Unknown
CVE: CVE-2007-6685
CVE-2007-6686
CVE-2007-6687
CVE-2007-6688
CVE-2007-6689
CVE-2007-6690
CVE-2007-6691
CVE-2007-6692
CVE-2007-6693
Remote: Yes
Local: No
Published: Dec 26 2007 12:00AM
Updated: Apr 13 2015 09:49PM
Credit: The vendor reported these issues.
Vulnerable: Redhat Fedora 7
Gentoo Linux
Gallery Gallery 2.0.3
Gallery Gallery 2.0.2
Gallery Gallery 2.0.1
Gallery Gallery 2.0 Beta3
Gallery Gallery 2.0 Beta2
Gallery Gallery 2.0 Beta1
Gallery Gallery 2.0 Alpha4
Gallery Gallery 2.0 Alpha3
Gallery Gallery 2.0 Alpha2
Gallery Gallery 2.0 Alpha1
Gallery Gallery 2.0 Alpha
Gallery Gallery 2.0
Gallery Gallery 1.5.3
Gallery Gallery 1.5.2 -RC2
Gallery Gallery 1.5.2 -pl2
Gallery Gallery 1.5.2
Gallery Gallery 1.5.1 -RC2
Gallery Gallery 1.5.1
Gallery Gallery 1.5 -pl1
Gallery Gallery 1.5
Gallery Gallery 1.4.4 -pl5
Gallery Gallery 1.4.4 -pl4
Gallery Gallery 1.4.4 -pl3
Gallery Gallery 1.4.4 -pl2
Gallery Gallery 1.4.3 -pl2
Gallery Gallery 1.4.3 -pl1
Gallery Gallery 1.4.2
Gallery Gallery 1.4.1
Gallery Gallery 1.4 -pl2
Gallery Gallery 1.4 -pl1
Gallery Gallery 1.4
Not Vulnerable: Gallery Gallery 2.2.4

Discussion

Gallery Versions Prior to 2.2.4 Multiple Remote Vulnerabilities and Unspecified Weakness

Gallery is prone to multiple remote issues, including:

- An arbitrary-file-upload vulnerability
- A local file-include vulnerability
- Multiple cross-site scripting vulnerabilities
- Multiple information-disclosure vulnerabilities
- A security vulnerability that allows attackers to perform phishing attacks
- Multiple unspecified vulnerabilities
- An unspecified weakness

An attacker can exploit these issues to compromise the affected application, execute arbitrary code within the context of the webserver process, steal cookie-based authentication credentials, obtain sensitive information, and gain unauthorized access to the application. Other attacks are also possible.

These issues affect versions prior to Gallery 2.2.4.

Exploit / POC

Gallery Versions Prior to 2.2.4 Multiple Remote Vulnerabilities and Unspecified Weakness

An attacker can exploit these issues through a browser. To exploit a cross-site scripting vulnerability, an attacker entices an unsuspecting victim to follow a malicious URI.

Solution / Fix

Gallery Versions Prior to 2.2.4 Multiple Remote Vulnerabilities and Unspecified Weakness

Solution:
The vendor released Gallery 2.2.4 to address these issues. Please see the references for more information.


Gallery Gallery 1.4

Gallery Gallery 1.4 -pl2

Gallery Gallery 1.4 -pl1

Gallery Gallery 1.4.1

Gallery Gallery 1.4.2

Gallery Gallery 1.4.3 -pl1

Gallery Gallery 1.4.3 -pl2

Gallery Gallery 1.4.4 -pl3

Gallery Gallery 1.4.4 -pl2

Gallery Gallery 1.4.4 -pl5

Gallery Gallery 1.4.4 -pl4

Gallery Gallery 1.5

Gallery Gallery 1.5 -pl1

Gallery Gallery 1.5.1 -RC2

Gallery Gallery 1.5.1

Gallery Gallery 1.5.2 -pl2

Gallery Gallery 1.5.2

Gallery Gallery 1.5.2 -RC2

Gallery Gallery 1.5.3

Gallery Gallery 2.0 Beta3

Gallery Gallery 2.0 Alpha3

Gallery Gallery 2.0

Gallery Gallery 2.0 Alpha4

Gallery Gallery 2.0 Alpha2

Gallery Gallery 2.0 Beta2

Gallery Gallery 2.0 Beta1

Gallery Gallery 2.0 Alpha1

Gallery Gallery 2.0 Alpha

Gallery Gallery 2.0.1

Gallery Gallery 2.0.2

Gallery Gallery 2.0.3

References

Gallery Versions Prior to 2.2.4 Multiple Remote Vulnerabilities and Unspecified Weakness

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report