CVE-2008-5296 Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of th...
MediumCVSS 6.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gallery | <= 1.5.9 | No fix listed |
| gallery | <= 1.6 | No fix listed |
| gallery | = 1.2.1 | No fix listed |
| gallery | = 1.3.1 | No fix listed |
| gallery | = 1.3.2 | No fix listed |
| gallery | = 1.3.3 | No fix listed |
| gallery | = 1.3.4-pl1 | No fix listed |
| gallery | = 1.4 | No fix listed |
| gallery | = 1.4.1 | No fix listed |
| gallery | = 1.4.4 | No fix listed |
| gallery | = 1.4.4-pl2 | No fix listed |
| gallery | = 1.5.1-rc2 | No fix listed |
| gallery | = 1.5.2 | No fix listed |
| gallery | = 1.5.7 | No fix listed |
References
- gallery.menalto.com patch vendor-advisory
- 50089 vdb-entry
- 32817 third-party-advisory vendor-advisory
- 32440 vdb-entry
- gallery-cookie-security-bypass(46804) vdb-entry