CVE-2006-6616: w00t Gallery

Medium severity, CVSS 6.0. EPSS: 1% chance of exploitation in the next 30 days.

index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information.

Affected products

• w00t Gallery w00t Gallery: version 1.4.0 only

Published 2006-12-18. Last modified 2026-06-16.