CVE-2005-3251: Gallery Project Gallery

Medium severity, CVSS 6.4. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.

Affected products

• Gallery Project Gallery: version 2.0 only; version 2.0_alpha1 only; version 2.0_alpha2 only; version 2.0_alpha3 only; version 2.0_alpha4 only; version 2.0_beta1 only; …

Published 2005-10-17. Last modified 2026-06-16.