Sploitus

24 exploited vulnerabilities in Gallery

Vulnerabilities with publicly known exploits

Vendors
Avideo, Gallery, Php Nuke, WordPress, Galerie, Wsn
With known exploits
24
Affected Fgallery Project Fgallery versions
= 2.4.1
Affected Vm Watermark versions
= 0.4.1
Affected Kooijman-design Jgallery versions
= 1.3
Affected Galerie versions
= 2.4
Affected Gallery Project Gallery versions
= 1.4.4, 1.4, 1.4_pl1, 1.3.1, 2.0, 2.0.1, 2.0.2, 2.0_alpha, 2.0_alpha1, 2.0_alpha2, 2.0_alpha3, 2.0_alpha4, 2.0_beta1, 2.0_beta2, 2.0_beta3, 2.0.3, 2.1_rc1, 2.1_rc2, 1.3.2, 1.3.3, 1.4.1, 1.1, 1.2, 1.2.1, 1.2.1_p1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.3, 1.3.4
Affected Wsn Forum versions
≤ 4.1.43
Affected Wsn Gallery versions
≤ 4.1.30
Affected Wsn Knowledge Base versions
≤ 4.1.36

Vulnerabilities with exploits

Highest CVSS first — 15 of these already have exploit code on Sploitus

CVE-2026-33479
CVSS 8.8 HIGH 2026-03-20FIX AVAILABLE
CVE-2013-2240
CVSS 7.5 HIGH 2013-10-10FIX AVAILABLE
CVE-2008-4804
CVSS 7.5 HIGH 2008-10-31FIX AVAILABLE
CVE-2008-0491 1 exploit
CVSS 7.5 HIGH 2008-01-30FIX AVAILABLE
WordPress Plugin fGallery 2.4.1 - 'fimrss.php' SQL Injection
CVE-2007-2575 1 exploit
CVSS 7.5 HIGH 2007-05-09FIX AVAILABLE
vm Watermark for Gallery 0.4.1 - Remote File Inclusion
CVE-2007-2158 1 exploit
CVSS 7.5 HIGH 2007-04-19
jGallery 1.3 - 'index.php' Remote File Inclusion
CVE-2005-3508 1 exploit
CVSS 7.5 HIGH 2005-11-06FIX AVAILABLE
Galerie 2.4 - 'showgallery.php' SQL Injection
CVE-2005-0377
CVSS 7.5 HIGH 2005-02-13FIX AVAILABLE
CVE-2005-0376
CVSS 7.5 HIGH 2005-01-12FIX AVAILABLE
CVE-2004-1466 1 exploit
CVSS 7.5 HIGH 2004-12-31FIX AVAILABLE
Gallery 1.4.4 - Remote Server-Side Script Execution
CVE-2003-1227 1 exploit
CVSS 7.5 HIGH 2003-12-31FIX AVAILABLE
Gallery 1.4 - 'index.php' Remote File Inclusion
CVE-2002-1412 2 exploits
CVSS 7.5 HIGH 2003-04-11FIX AVAILABLE
Immunity Canvas: GALLERY1_INCLUDEBharat Mediratta Gallery 1.x - Remote File Inclusion
CVE-2008-3600
CVSS 6.8 MEDIUM 2008-08-12FIX AVAILABLE
CVE-2008-3555 1 exploit
CVSS 6.8 MEDIUM 2008-08-08FIX AVAILABLE
Wsn (Multiple Products) - Local File Inclusion / Code Execution
CVE-2006-1128 2 exploits
CVSS 6.4 MEDIUM 2006-03-09FIX AVAILABLE
Gallery 2 2.0.2 - Multiple VulnerabilitiesGallery 2 < 2.0.2 - Multiple Vulnerabilities
CVE-2022-1946 1 exploit
CVSS 6.1 MEDIUM 2022-07-04FIX AVAILABLE
Gallery < 2.0.0 - Reflected Cross-Site Scripting
CVE-2007-2643 1 exploit
CVSS 5.0 MEDIUM 2007-05-13FIX AVAILABLE
maGAZIn 2.0 - 'PHPThumb.php?src' Remote File Disclosure
CVE-2006-1219 1 exploit
CVSS 5.0 MEDIUM 2006-03-14FIX AVAILABLE
Gallery 2.0.3 - 'stepOrder[]' Remote Command Execution
CVE-2005-0375
CVSS 5.0 MEDIUM 2005-02-13FIX AVAILABLE
CVE-2004-2124 1 exploit
CVSS 5.0 MEDIUM 2004-12-31FIX AVAILABLE
Gallery 1.3.x/1.4 - Remote Global Variable Injection
CVE-2001-0900 1 exploit
CVSS 5.0 MEDIUM 2001-11-18FIX AVAILABLE
bharat Mediratta Gallery 1.1/1.2 - Directory Traversal
CVE-2003-1428
CVSS 4.8 MEDIUM 2003-12-31FIX AVAILABLE
CVE-2005-0221
CVSS 4.3 MEDIUM 2005-01-17FIX AVAILABLE
CVE-2003-0614 1 exploit
CVSS 4.3 MEDIUM 2003-08-01FIX AVAILABLE
Gallery 1.2/1.3.x - Search Engine Cross-Site Scripting