See here
usual stuff
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3396

I have the GET log, Robs, if you like.

I do not use that comp by the way.

JM,

Do you have any information on the developer such as a website URL or an email address?  I searched around on Google but could only find vulnerability reports and not any actual websites for the component.

I probably don't need the log files.  Maybe you could just send them the report if you find any contact information for them?

Thanks,
Rob S.

Galleria is abandonware Rob - the best course of action for anyone using it is to backup their images, remove Galleria completely and find another gallery to use that is still in development and which is secure.

There is an update patch here: http://forum.mamboguru.com/showthread.php?t=316 but no guarantees that it can be more than a temporary measure.

I suspected as much.  Thanks for the confirmation though. 

Sent amail to the guy through
http://mamboxchange.com/projects/mambatstaff

Watch out! Just recently I found galleria files on my site, but I installed and uninstalled it years ago. Apparently Galleria deinstalls but is leaving the files on the server.
So if you remove the program, make sure by FTP or JXplorer that all files in components and administrator/components are removed.

yup, you were right. i was recently going through my old website and found it didn't delete all the files on the uninstallation. thanks for the info.