Gallery2 versions 2.0.2 and below suffer from IP spoofing, script injection, and arbitrary file access flaws.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44358/gallery202.txt
Source: https://packetstormsecurity.com/files/44358/gallery202.txt.html