vulnwire
10.0crit

CVE-2007-6691

Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) "hotlink protection" in the URL re…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.2%
percentile 82%
Public exploits
0
none known

Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) "hotlink protection" in the URL rewrite module, (2) a WebDAV view in the WebDAV module, (3) a comment view in the Comment module, (4) unspecified "item information disclosure attacks" in the Core module Gallery application, (5) the slideshow in the Slideshow module, and (6) multiple Print modules.

Exploit prediction (EPSS)

2.16% probability of exploitation in the next 30 days, higher than 82% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • osvdb.org /41664 · vdb-entry, x_refsource_OSVDB, x_transferred
  • gallery.menalto.com /gallery_2.2.4_released · x_refsource_CONFIRM, x_transferred
  • security.gentoo.org /glsa/glsa-200802-04.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • osvdb.org /41662 · vdb-entry, x_refsource_OSVDB, x_transferred
  • osvdb.org /41665 · vdb-entry, x_refsource_OSVDB, x_transferred
  • osvdb.org /41667 · vdb-entry, x_refsource_OSVDB, x_transferred
  • osvdb.org /41666 · vdb-entry, x_refsource_OSVDB, x_transferred
  • secunia.com /advisories/28898 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • bugs.gentoo.org /show_bug.cgi?id=203217 · x_refsource_CONFIRM, x_transferred
  • osvdb.org /41663 · vdb-entry, x_refsource_OSVDB, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.