gallery2: multiple vulnerabilities [LWN.net]

Package(s):

gallery2

CVE #(s):

CVE-2007-6685 CVE-2007-6686 CVE-2007-6687 CVE-2007-6688 CVE-2007-6689 CVE-2007-6690 CVE-2007-6691 CVE-2007-6692 CVE-2007-6693

Created:

December 27, 2007

Updated:

February 12, 2008

Description:

Versions of the Gallery photo management application before 2.2.4 have the following vulnerabilities: (1) an unauthorized album creation and file upload, (2) a local file inclusion vulnerability, (3) several cross site scripting vulnerabilities, (4) a web-accessibility protection problem, (5) problems with checks for disallowed file extensions with file uploads, (6) missing permissions checks on GR commands, (7) several information disclosures, (8) an arbitrary URL redirection problem and (9) a proxied request weakness.

Alerts:

Gentoo	200802-04	2008-02-11
Fedora	FEDORA-2007-4778	2007-12-26
Fedora	FEDORA-2007-4777	2007-12-26

(Log in to post comments)