CVE-2008-2723: Menalto Gallery

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."

Affected products

• Menalto Gallery: up to and including 2.2.4; version 2.1 only; version 2.1.1 only; version 2.1.2 only; version 2.2.0 only; version 2.2.1 only; …

Published 2008-06-16. Last modified 2026-06-16.