CVEvulnerability
CVE-2007-4650
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV and (b) Reupload modules.
Affected configurations
• bharat mediratta gallery (<= 2.2.2)
Related
Weakness · not in database (1)
References
- http://bugs.gentoo.org/show_bug.cgi?id=191587 bugs.gentoo.org
- http://gallery.menalto.com/gallery_2.2.3_released Patch
- http://osvdb.org/41657 osvdb.org
- http://osvdb.org/41658 osvdb.org
- http://secunia.com/advisories/26716 secunia.com
- http://secunia.com/advisories/26719 secunia.com
- http://secunia.com/advisories/27502 secunia.com
- http://secunia.com/advisories/27594 secunia.com
- http://security.gentoo.org/glsa/glsa-200711-03.xml security.gentoo.org
- http://www.debian.org/security/2007/dsa-1404 www.debian.org
- http://www.securityfocus.com/bid/25580 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3072 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=267421 bugzilla.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html www.redhat.com
- http://bugs.gentoo.org/show_bug.cgi?id=191587 bugs.gentoo.org
- http://gallery.menalto.com/gallery_2.2.3_released Patch
- http://osvdb.org/41657 osvdb.org
- http://osvdb.org/41658 osvdb.org
- http://secunia.com/advisories/26716 secunia.com
- http://secunia.com/advisories/26719 secunia.com
- http://secunia.com/advisories/27502 secunia.com
- http://secunia.com/advisories/27594 secunia.com
- http://security.gentoo.org/glsa/glsa-200711-03.xml security.gentoo.org
- http://www.debian.org/security/2007/dsa-1404 www.debian.org
- http://www.securityfocus.com/bid/25580 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3072 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=267421 bugzilla.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html www.redhat.com