What’s Vulnerable › Vulnerabilities

CVE-2007-6686

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-01-17 · updated 2026-06-16

Description

The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors related to the admin controller.

Affected products

• Menalto Gallery: through 2.2.3

References

• http://bugs.gentoo.org/show_bug.cgi?id=203217
• http://gallery.menalto.com/gallery_2.2.4_released
• http://osvdb.org/41674
• http://secunia.com/advisories/28898
• http://security.gentoo.org/glsa/glsa-200802-04.xml
• http://bugs.gentoo.org/show_bug.cgi?id=203217
• http://gallery.menalto.com/gallery_2.2.4_released
• http://osvdb.org/41674
• http://secunia.com/advisories/28898
• http://security.gentoo.org/glsa/glsa-200802-04.xml

Get alerted when CVE-2007-6686 or the next vulnerability affects your stack