Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2012-4343 1 Menalto 1 Gallery 2025-04-11 N/A
Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors.
CVE-2013-2138 1 Menalto 1 Gallery 2025-04-11 N/A
The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.
CVE-2013-2240 1 Menalto 1 Gallery 2025-04-11 N/A
lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138.