gallery: multiple vulnerabilities
| Package(s): | gallery | CVE #(s): | CVE-2005-2734 CVE-2006-0330 CVE-2006-4030 | ||||
| Created: | August 10, 2006 | Updated: | August 16, 2006 | ||||
| Description: | gallery, a web-based photo album, has the following remotely
exploitable vulnerabilities:
A cross-site scripting vulnerability can be used for the injection of web script code through HTML or EXIF information. The user registration code is vulnerable to a cross-site scripting attack involving the injection of web script code. The stats modules has missing input sanitizing, this can lead to information disclosure. | ||||||
| Alerts: |
| ||||||