1.2.1

DATE	CVE	VULNERABILITY TITLE	RISK
2003-08-27	CVE-2003-0614	Unspecified vulnerability in Gallery Project Gallery Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter. network gallery-project	4.3
2001-10-02	CVE-2001-1234	Remote Arbitrary Code Execution vulnerability in Gallery Project Gallery 1.1/1.2/1.2.1 Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable. network low complexity gallery-project	7.5