Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Gallery: cross-site scripting vulnerability

Package(s):

Gallery

CVE #(s):

CAN-2004-1106

Created:

November 8, 2004

Updated:

January 17, 2005

Description:

Jim Paris has discovered a cross-site scripting vulnerability in Gallery. By sending a carefully crafted URL, an attacker can inject and execute script code in the victim's browser window, and potentially compromise the users gallery.

Alerts:

Debian	DSA-642-1	2005-01-17
Gentoo	200411-10:01	2004-11-06

(Log in to post comments)