medium4.6
CVE-2005-2596
User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries.
Impact
User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gallery Project | Gallery | Version 1.3.4 |
References
- NVD record
- CVE.org record
- http://gallery.menalto.com/index.php?name=PNphpBB2&file=viewtopic&t=7048
- http://secunia.com/advisories/16389
- http://secunia.com/advisories/17367
- http://www.debian.org/security/2005/dsa-879
- http://www.securityfocus.com/bid/14547
- http://gallery.menalto.com/index.php?name=PNphpBB2&file=viewtopic&t=7048
- http://secunia.com/advisories/16389
- http://secunia.com/advisories/17367
- http://www.debian.org/security/2005/dsa-879
- http://www.securityfocus.com/bid/14547