Menalto

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 23
    Known Exploited: 0
    7
    Critical Level Threats
    5
    High Level Threats
    11
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2013-2241

    modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information (image files) via the "full" string in the size parameter.

    Last Modified: Apr 11, 2025
    Published: Oct 10, 2013

    CVE-2013-2138

    The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack.

    Last Modified: Apr 11, 2025
    Published: Oct 10, 2013

    CVE-2013-2240

    lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138.

    Last Modified: Apr 11, 2025
    Published: Oct 10, 2013

    CVE-2012-4342

    Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    Last Modified: Apr 11, 2025
    Published: Aug 15, 2012

    CVE-2012-4343

    Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors.

    Last Modified: Apr 11, 2025
    Published: Aug 15, 2012
    Items Per Page