PT-2008-1655 · Menalto · Menalto Gallery

Published 2008-01-17 · Updated 2008-11-15 · CVE-2007-6692

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Menalto Gallery versions prior to 2.2.4

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Core and print modules.

Recommendations For versions prior to 2.2.4, update to version 2.2.4 or later to resolve the issue.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2007-6692

Affected Products

Menalto Gallery

References · 8

• http://security.gentoo.org/glsa/glsa-200802-04.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6692 · Security Note
• http://osvdb.org/41660 · Note
• http://secunia.com/advisories/28898 · Note
• http://bugs.gentoo.org/show_bug.cgi?id=203217 · Note
• http://osvdb.org/41661 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6692 · Note
• http://gallery.menalto.com/gallery_2.2.4_released · Note