GCVE - cpe:2.3:a:mcgallery:mcgallery_pro:2.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mcgallery:mcgallery_pro:2.2:*:*:*:*:*:*:*

part: a version: 2.2 update: *

Vendor	Mcgallery (`dad4d8ac-b220-5996-9e45-24195f9a0f99`)
Product	Mcgallery Pro (`f601a780-2dbf-5640-bbe4-2e544b5d9786`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4720`	vulnerable	2026-06-08 04:49:18.608907	Details available PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. Published: 2006-09-12T16:00:00.000Z Updated: 2024-08-07T19:23:40.426Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19936 https://www.exploit-db.com/exploits/2342 http://www.securityfocus.com/archive/1/445783/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/28848 http://www.nyubicrew.org/adv/solpot-adv-06.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4252`	not_vulnerable	2026-06-08 04:48:43.350666	Details available Cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters. Published: 2005-12-14T11:00:00.000Z Updated: 2024-08-07T23:38:51.520Z Open on db.gcve.eu Reference links http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html http://secunia.com/advisories/18039 http://www.securityfocus.com/bid/15845 http://www.vupen.com/english/advisories/2005/2886 http://www.osvdb.org/21721	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4251`	vulnerable	2026-06-08 04:48:43.350323	Details available Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) start, and (3) rand parameters to show.php, and the (4) album parameter to index.php. Published: 2005-12-14T11:00:00.000Z Updated: 2024-08-07T23:38:51.560Z Open on db.gcve.eu Reference links http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html http://www.osvdb.org/21719 http://secunia.com/advisories/18039 http://www.securityfocus.com/bid/15845 http://www.osvdb.org/21720	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4250`	vulnerable	2026-06-08 04:48:43.349878	Details available Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter. Published: 2005-12-14T11:00:00.000Z Updated: 2024-08-07T23:38:51.802Z Open on db.gcve.eu Reference links http://pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html http://secunia.com/advisories/18039 http://www.osvdb.org/21718 http://www.vupen.com/english/advisories/2005/2886	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.