CVE-2006-1127

Gallery 2 up to 2.0.2 - Cross-Site Scripting via X-Forwarded-For Header

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1127. PoCs published by GulfTech Security.

AI-analyzed exploit summary The document describes multiple vulnerabilities in Gallery 2 <= 2.0.2, including IP spoofing via X_FORWARDED_FOR, script injection, and arbitrary file access due to improper session ID handling. It provides code snippets and explanations but does not include executable exploit code.

Description

Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album.

Exploits (1)

exploitdb WRITEUP
by GulfTech Security · textwebappsphp
https://www.exploit-db.com/exploits/43837

The document describes multiple vulnerabilities in Gallery 2 <= 2.0.2, including IP spoofing via X_FORWARDED_FOR, script injection, and arbitrary file access due to improper session ID handling. It provides code snippets and explanations but does not include executable exploit code.

Classification
Writeup 100%
Attack Type
Other
Complexity
Moderate
Reliability
Theoretical
Target: Gallery 2 <= 2.0.2
No auth needed
Prerequisites: Access to the target Gallery 2 installation · Ability to send crafted HTTP headers
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16940
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/23596
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25117
Various Sources x_refsource_confirm
http://gallery.menalto.com/gallery_2.0.3_released
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0813
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19104
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015717

Scores

EPSS 0.0248
EPSS Percentile 82.5%

Details

Status published
Products (11)
gallery_project/gallery 2.0
gallery_project/gallery 2.0.1
gallery_project/gallery 2.0.2
gallery_project/gallery 2.0_alpha
gallery_project/gallery 2.0_alpha1
gallery_project/gallery 2.0_alpha2
gallery_project/gallery 2.0_alpha3
gallery_project/gallery 2.0_alpha4
gallery_project/gallery 2.0_beta1
gallery_project/gallery 2.0_beta2
... and 1 more
Published Mar 09, 2006
Tracked Since Feb 18, 2026