Approved changes feed: RSS · Atom

cpe:2.3:a:gallery_project:gallery:2.0_rc1:*:*:*:*:*:*:*

part: a version: 2.0_rc1 update: *

VendorGallery Project (640b5a84-59a1-5905-8259-9942c4366e3c)
ProductGallery (db5f706d-3be6-564f-a220-bbc80a6e3fc6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bwdutton/gallery3 purl2cpe 2026-06-01 10:11:10.501145
pkg:github/gallery/gallery3 purl2cpe 2026-06-01 10:11:10.501147
pkg:sourceforge/gallery purl2cpe 2026-06-01 10:11:10.501148

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4023 vulnerable 2026-06-08 04:48:42.850553 Details available
Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors.
Published: 2005-12-05T11:00:00.000Z
Updated: 2024-08-07T23:31:48.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4022 not_vulnerable 2026-06-08 04:48:42.850098 Details available
Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
Published: 2005-12-05T11:00:00.000Z
Updated: 2024-08-07T23:31:48.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4021 vulnerable 2026-06-08 04:48:42.848973 Details available
The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
Published: 2005-12-05T11:00:00.000Z
Updated: 2024-08-07T23:31:48.797Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.