VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 10, 2013· Updated Apr 29, 2026

CVE-2013-2240

CVE-2013-2240

Description

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138.

Affected products

9
  • Menalto/Gallery9 versions
    cpe:2.3:a:menalto:gallery:3.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:menalto:gallery:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:menalto:gallery:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:menalto:gallery:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:menalto:gallery:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:menalto:gallery:3.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:menalto:gallery:3.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:menalto:gallery:3.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:menalto:gallery:3.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:menalto:gallery:3.0.8:*:*:*:*:*:*:*

Patches

1
c5318bb1a2dd
https://github.com/gallery/gallery3via nvd-ref
commit

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

5

News mentions

0

No linked articles in our index yet.