CVE-2006-0587: Gallery Project Gallery

Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file.

Affected products

• Gallery Project Gallery: version 1.3.4 only; version 1.4 only; version 1.4.1 only; version 1.4.2 only; version 1.4.3_pl1 only; version 1.4.3_pl2 only; …

Published 2006-02-08. Last modified 2026-06-16.