CVE-2007-4650

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-04 · updated 2026-06-16
Weakness: CWE-264

Description

Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV and (b) Reupload modules.

Affected products

Bharat Mediratta Gallery: through 2.2.2

References

http://bugs.gentoo.org/show_bug.cgi?id=191587
http://gallery.menalto.com/gallery_2.2.3_released
http://osvdb.org/41657
http://osvdb.org/41658
http://secunia.com/advisories/26716
http://secunia.com/advisories/26719
http://secunia.com/advisories/27502
http://secunia.com/advisories/27594
http://security.gentoo.org/glsa/glsa-200711-03.xml
http://www.debian.org/security/2007/dsa-1404
http://www.securityfocus.com/bid/25580
http://www.vupen.com/english/advisories/2007/3072

Get alerted when CVE-2007-4650 or the next vulnerability affects your stack