Approved changes feed: RSS · Atom

cpe:2.3:a:gallery_project:gallery:2.0_rc2:*:*:*:*:*:*:*

part: a version: 2.0_rc2 update: *

VendorGallery Project (640b5a84-59a1-5905-8259-9942c4366e3c)
ProductGallery (db5f706d-3be6-564f-a220-bbc80a6e3fc6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bwdutton/gallery3 purl2cpe 2026-06-01 10:11:10.502367
pkg:github/gallery/gallery3 purl2cpe 2026-06-01 10:11:10.502369
pkg:sourceforge/gallery purl2cpe 2026-06-01 10:11:10.502370

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4023 vulnerable 2026-06-08 04:48:42.850570 Details available
Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors.
Published: 2005-12-05T11:00:00.000Z
Updated: 2024-08-07T23:31:48.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4022 not_vulnerable 2026-06-08 04:48:42.850114 Details available
Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
Published: 2005-12-05T11:00:00.000Z
Updated: 2024-08-07T23:31:48.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4021 vulnerable 2026-06-08 04:48:42.849507 Details available
The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
Published: 2005-12-05T11:00:00.000Z
Updated: 2024-08-07T23:31:48.797Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.