Page 5 of 43 results (0.002 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-0219

https://notcve.org/view.php?id=CVE-2005-0219

06 Feb 2005 — Multiple cross-site scripting (XSS) vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the index field in add_comment.php, (2) set_albumName, (3) slide_index, (4) slide_full, (5) slide_loop, (6) slide_pause, (7) slide_dir fields in slideshow_low.php, or (8) username field in search.php. • http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html •

CVSS: 9.1EPSS: 6%CPEs: 5EXPL: 1

CVE-2004-2124 – Gallery 1.3.x/1.4 - Remote Global Variable Injection

https://notcve.org/view.php?id=CVE-2004-2124

31 Dec 2004 — The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412. • https://www.exploit-db.com/exploits/23599 •

CVSS: 6.1EPSS: 6%CPEs: 13EXPL: 1

CVE-2003-0614 – Gallery 1.2/1.3.x - Search Engine Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2003-0614

01 Aug 2003 — Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter. Vulnerabilidad en sitios cruzados en search.php de Gallery 1.1 a 1.3.4 permite a atacantes remotos insertar script web mediante el parámetro searchstring • https://www.exploit-db.com/exploits/22961 •