← All advisories

Unrated severityNVD Advisory· Published Mar 16, 2007· Updated Jun 16, 2026

CVE-2007-1478

CVE-2007-1478

Description

download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the filename parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Mcgallery/Mcgallery Pro2 versions
cpe:2.3:a:mcgallery:mcgallery:0.5b:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mcgallery:mcgallery:0.5b:*:*:*:*:*:*:*
- (no CPE)range: <=0.5b

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.