Mcgallery

mcgallery

Vendor: Mcgallery • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-1478 1Mcgallery 1Mcgallery Apr 23, 2026 Mar 16, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the filename parameter.
CVE-2005-1998 1Mcgallery 1Mcgallery Apr 16, 2026 Jun 15, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.
CVE-2005-1997 1Mcgallery 1Mcgallery Apr 16, 2026 Jun 15, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 show.php in McGallery 1.1 allows remote attackers to connect to arbitrary databases, or gain sensitive information by triggering an error, via a modified host parameter.