Unrated severityNVD Advisory· Published Oct 10, 2013· Updated Jun 16, 2026
CVE-2013-2240
CVE-2013-2240
Description
lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:menalto:gallery:3.0:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:menalto:gallery:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:menalto:gallery:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:menalto:gallery:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:menalto:gallery:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:menalto:gallery:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:menalto:gallery:3.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:menalto:gallery:3.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:menalto:gallery:3.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:menalto:gallery:3.0.8:*:*:*:*:*:*:*
- Range: < 3.0.9
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.