Gallery Gallery vulnerabilities

• gallery Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows... CVE-2008-5296 6.8 MediumDecember 1, 2008
• gallery Cross-site scripting (XSS) vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to... CVE-2008-4130 4.3 MediumSeptember 18, 2008
• gallery Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing... CVE-2008-4129 4.0 MediumSeptember 18, 2008
• gallery Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie... CVE-2008-3662 5.0 MediumSeptember 18, 2008