FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-03-27 18:04:16 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
fc9e73b2-8685-11dd-bb64-0030843d3802gallery -- multiple vulnerabilities

Secunia reports:

An error in the handing of ZIP archives with symbolic links can be exploited to disclose the contents of arbitrary files.

Input from uploaded Flash animations is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which is executed in a user's browser session in context of an affected site when the malicious data is viewed.


Discovery 2008-09-18
Entry 2008-09-19
Modified 2008-10-03
gallery
< 1.5.9

gallery2
< 2.2.6

http://secunia.com/advisories/31912/
http://secunia.com/advisories/31858/
12b1a62d-6056-4d90-9e21-45fcde6abae4gallery -- remote code injection via HTTP_POST_VARS

A web server running Gallery can be exploited for arbitrary PHP code execution through the use of a maliciously crafted URL.


Discovery 2004-01-27
Entry 2005-06-17
gallery
< 1.4.1.1

CVE-2004-2124
http://marc.theaimsgroup.com/?l=bugtraq&m=107524414317693
5752a0df-60c5-4876-a872-f12f9a02fa05gallery -- cross-site scripting

Gallery includes several cross-site scripting vulnerabilities that could allow malicious content to be injected.


Discovery 2005-01-26
Entry 2005-06-17
gallery
< 1.4.4.5

CVE-2004-1106
CVE-2005-0219
CVE-2005-0220
CVE-2005-0221
CVE-2005-0222
11602
http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147
http://marc.theaimsgroup.com/?l=bugtraq&m=110608459222364
253ea131-bd12-11d8-b071-00e08110b673Gallery 1.4.3 and ealier user authentication bypass

A flaw exists in Gallery versions previous to 1.4.3-pl1 and post 1.2 which may give an attacker the potential to log in under the "admin" account. Data outside of the gallery is unaffected and the attacker cannot modify any data other than the photos or photo albums.


Discovery 2004-06-01
Entry 2004-06-24
gallery
< 1.4.3.2

CVE-2004-0522
http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=123
http://secunia.com/advisories/11752