Total vulnerabilities in the database
User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries.
CVSS v2:
No CWE or OWASP classifications available.