Vulnerabilities > Maian > Gallery

DATE CVE VULNERABILITY TITLE RISK
2012-04-22 CVE-2012-2405 Cryptographic Issues vulnerability in multiple products
Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113.
network
low complexity
maian menalto CWE-310
critical
 10.0
10
2012-04-22 CVE-2012-1113 Cross-Site Scripting vulnerability in multiple products
Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
maian menalto CWE-79
4.3
4.3
2007-04-18 CVE-2007-2076 Remote Security vulnerability in Maian Gallery 1.0
PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.
network
maian
6.8
6.8