CVE-2006-2118
JMK’s Picture Gallery allows remote attackers to bypass authentication via a direct request to admin_gallery.php3, possibly related to the add action.
Date published : 2006-05-01
http://www.securityfocus.com/bid/17755
http://www.securityfocus.com/archive/1/432575/100/0/threaded