Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Gallery | Menalto | 2.2.1 | 2.2.1 |
Gallery | Menalto | 2.2.3 | 2.2.3 |
Gallery | Menalto | 2.1.1 | 2.1.1 |
Gallery | Menalto | 2.1.2 | 2.1.2 |
Gallery | Menalto | 2.1 | 2.1 |
Gallery | Menalto | 2.2.0 | 2.2.0 |
Gallery | Menalto | * | 2.2.4 |
Gallery | Menalto | 2.2.2 | 2.2.2 |