PT-2005-1303 · Gallery · Gallery

Rafel Ivgi + 1 · Published 2005-02-06 · Updated 2017-07-11 · CVE-2005-0222

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gallery 2.0 Alpha

Description The issue allows remote attackers to gain sensitive information by modifying the g2 subView parameter in the main.php file, which reveals the path in an error message.

Recommendations For Gallery 2.0 Alpha, consider restricting access to the main.php file or avoiding the use of the g2 subView parameter until a fix is available.

Fix

Related Identifiers

CVE-2005-0222

Affected Products

Gallery

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-0222 · Security Note
• http://theinsider.deep-ice.com/texts/advisory69.txt · Vendor Advisory
• http://marc.info/?l=bugtraq&m=110608459222364&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18940 · Note
• http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0222 · Note