CVEvulnerability
CVE-2006-1126
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-03-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTE_ADDR.
Affected configurations
• gallery project gallery 2.0.2
Related
Referenced by CWE · observed example (1)
- CWE-348 Use of Less Trusted Source weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html Patch, Vendor Advisory
- http://gallery.menalto.com/gallery_2.0.3_released gallery.menalto.com
- http://secunia.com/advisories/19104 Patch, Vendor Advisory
- http://securitytracker.com/id?1015717 Patch, Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00106-03022006 Patch
- http://www.vupen.com/english/advisories/2006/0813 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25120 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html Patch, Vendor Advisory
- http://gallery.menalto.com/gallery_2.0.3_released gallery.menalto.com
- http://secunia.com/advisories/19104 Patch, Vendor Advisory
- http://securitytracker.com/id?1015717 Patch, Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00106-03022006 Patch
- http://www.vupen.com/english/advisories/2006/0813 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25120 exchange.xforce.ibmcloud.com