CVE-2008-5296

Published: Dec 1, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information.

Affected (14)

Products: Gallery: Gallery

Gallery

1 product

Gallery

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Gallery Gallery	version ≤ 1.5.9
Gallery Gallery	version ≤ 1.6
Gallery Gallery	Version 1.2.1
Gallery Gallery	Version 1.3.1
Gallery Gallery	Version 1.3.2
Gallery Gallery	Version 1.3.3
Gallery Gallery	Version 1.3.4 pl1
Gallery Gallery	Version 1.4.1
Gallery Gallery	Version 1.4.4
Gallery Gallery	Version 1.4.4 pl2
Gallery Gallery	Version 1.4
Gallery Gallery	Version 1.5.1 rc2
Gallery Gallery	Version 1.5.2
Gallery Gallery	Version 1.5.7