Gallery: cross-site scripting vulnerability
| Package(s): | gallery | CVE #(s): | |||||||||
| Created: | January 31, 2005 | Updated: | February 10, 2005 | ||||||||
| Description: | Rafel Ivgi has discovered a cross-site scripting vulnerability where the 'username' parameter is not properly sanitized in 'login.php'. See this Gallery announcement for the release of 1.4.4-pl5 for more information. | ||||||||||
| Alerts: |
| ||||||||||