VulnerabilityModified
CVE-2006-6616
index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained…
MEDIUM 6.0EPSS 1.00%
Does this matter?
Lower severity and a low EPSS score (1.00%). Track it; it rarely justifies an emergency change on its own.
Description
index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
- EPSS
- 1.00% probability · 61th percentile
- CISA KEV
- Not listed
- Affected
- w00t gallery/w00t gallery
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/23383Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=471109Patch
- http://www.securityfocus.com/bid/21590
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30886
- http://secunia.com/advisories/23383Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=471109Patch
- http://www.securityfocus.com/bid/21590
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30886
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.