| Package | Affected versions | Patched versions |
|---|---|---|
| gallery | = 1.2.1= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.4= 1.4.1= 1.4.4= 1.5.1= 1.5.2= 1.5.7≤ 1.5.9≤ 1.6 |
Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free