CVE-2006-1126

no score yetEPSS 1.6%

gallery project gallery: no CVSS score yet. EPSS 1.6% chance of exploitation in the next 30 days.

Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTE_ADDR.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
Published: 2006-03-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gallery_project:gallery

References

http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html
http://gallery.menalto.com/gallery_2.0.3_released
http://secunia.com/advisories/19104
http://securitytracker.com/id?1015717
http://www.gulftech.org/?node=research&article_id=00106-03022006

Check your stack JSON