FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-0220

This CVE name corresponds to:

Entered Topic
2005-06-17 gallery -- cross-site scripting

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-0220 at cve.mitre.org

Details

Type Candidate
Name CVE-2005-0220
Phase Assigned(20050205)

Description

Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field.

References

Source Reference
BUGTRAQ 20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability
VULNWATCH 20050117 Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability
MISC http://theinsider.deep-ice.com/texts/advisory69.txt
GENTOO GLSA-200501-45
CONFIRM http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147
SECUNIA 13887
XF gallery-multiple-xss(18938)

Copyright © 2005 The MITRE Corporation.

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.