Back to Database
Status published
High
CVE-2008-1327
Gallarific does not require authentication for (1) users.php and (2)...
Vulnerability Description
Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1327
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/28163
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41106
- http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html
- http://secunia.com/advisories/29399
- https://lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3%40%3Cissues.struts.apache.org%3E
- https://lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db%40%3Cissues.struts.apache.org%3E
More from gallarific
View All →CVE-2011-0519
SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery...
High
7.5
CVE-2008-6567
Multiple cross-site scripting (XSS) vulnerabilities in Gallarific Free Edition allow...
Medium
4.3
CVE-2008-1469
Gallarific Free Edition 1.1 does not require authentication for (1)...
Medium
6.4
CVE-2008-1464
Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow...
High
7.5
CVE-2008-1326
Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote...
Medium
4.3
Affected Vendor
gallarific
View all reports →Affected Software
gallarific
Vulnerable Versions:
Unknown
Timeline
Official Publish:
March 13th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.