CVE-2006-4030

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-16 · updated 2026-06-16

Description

Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs."

Affected products

Gallery Plugin authors Gallery: through 1.5.1_rc2; 1.4, 1.4.1, 1.4.2, 1.4.3_pl1, 1.4.3_pl2, 1.4.4_pl2 (+8)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285
http://secunia.com/advisories/16594
http://secunia.com/advisories/21502
http://www.debian.org/security/2006/dsa-1148
http://www.securityfocus.com/bid/19453
http://www.vupen.com/english/advisories/2006/3250
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285
http://secunia.com/advisories/16594
http://secunia.com/advisories/21502
http://www.debian.org/security/2006/dsa-1148
http://www.securityfocus.com/bid/19453
http://www.vupen.com/english/advisories/2006/3250

Get alerted when CVE-2006-4030 or the next vulnerability affects your stack