Advanced thin client solution for Linux, based on Open Source. Mix Windows and Linux applications on the same desktop.

Create an account

Subscribe to LWN

LWN.net Weekly Edition for August 28, 2008

Fedora, Red Hat, and distributor security

LWN.net Weekly Edition for August 21, 2008

Standards, the kernel, and Postfix

In defense of Ubuntu

Printable page

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

Gallery: cross-site scripting vulnerability

Package(s):

gallery

CVE #(s):

Created:

January 31, 2005

Updated:

February 10, 2005

Description:

Rafel Ivgi has discovered a cross-site scripting vulnerability where the 'username' parameter is not properly sanitized in 'login.php'. See this Gallery announcement for the release of 1.4.4-pl5 for more information.

Alerts:

Gentoo	200501-45:03	2005-01-30
Gentoo	200501-45	2005-01-30

(Log in to post comments)