medium5.0
CVE-2008-2723
embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."
Impact
embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Menalto | Gallery | through 2.2.4 Versions 2.1, 2.1.1, 2.1.2, 2.2.0, 2.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://gallery.menalto.com/gallery_2.2.5_released
- http://secunia.com/advisories/30650
- http://secunia.com/advisories/30826
- http://www.securityfocus.com/bid/29681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43028
- https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html
- https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html
- http://gallery.menalto.com/gallery_2.2.5_released
- http://secunia.com/advisories/30650
- http://secunia.com/advisories/30826
- http://www.securityfocus.com/bid/29681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43028
- https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00766.html
- https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00836.html