CVE-2005-3432: Thomas Rybak Minigal 2

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to * (wildcard) and the page parameter set to all.

Affected products

• Thomas Rybak Minigal 2: version 0.5.1 only; version b13 only

Published 2005-11-02. Last modified 2026-06-16.