Page 12 of 72 results (0.004 seconds)

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2005-1947

https://notcve.org/view.php?id=CVE-2005-1947

Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) delimg actions. • http://marc.info/?l=bugtraq&m=111834146710329&w=2 http://www.gulftech.org/?node=research&article_id=00079-06092005 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-0222

https://notcve.org/view.php?id=CVE-2005-0222

main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView parameter, which reveals the path in an error message. • http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 http://marc.info/?l=bugtraq&m=110608459222364&w=2 http://theinsider.deep-ice.com/texts/advisory69.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/18940 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-0219

https://notcve.org/view.php?id=CVE-2005-0219

Multiple cross-site scripting (XSS) vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the index field in add_comment.php, (2) set_albumName, (3) slide_index, (4) slide_full, (5) slide_loop, (6) slide_pause, (7) slide_dir fields in slideshow_low.php, or (8) username field in search.php. • http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 http://marc.info/?l=bugtraq&m=110608459222364&w=2 http://theinsider.deep-ice.com/texts/advisory69.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/18938 https://exchange.xforce.ibmcloud.com/vulnerabilities/43473 •

CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 0

CVE-2005-0220

https://notcve.org/view.php?id=CVE-2005-0220

Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field. • http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 http://marc.info/?l=bugtraq&m=110608459222364&w=2 http://secunia.com/advisories/13887 http://theinsider.deep-ice.com/texts/advisory69.txt http://www.gentoo.org/security/en/glsa/glsa-200501-45.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/18938 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3

CVE-2005-0221

https://notcve.org/view.php?id=CVE-2005-0221

Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field. • http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147 http://marc.info/?l=bugtraq&m=110608459222364&w=2 http://theinsider.deep-ice.com/texts/advisory69.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/18938 https://exchange.xforce.ibmcloud.com/vulnerabilities/43472 •