CVE-2003-0614: XSS
Published Aug 1, 2003
·Updated
Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter.
Affected Software
13 affected components
Gallery Project Gallery=1.2.1_p1
Gallery Project Gallery=1.3.1
Gallery Project Gallery=1.2.5
Gallery Project Gallery=1.3.2
Gallery Project Gallery=1.2.2
Gallery Project Gallery=1.2.4
Gallery Project Gallery=1.1
Gallery Project Gallery=1.2.1
Gallery Project Gallery=1.3
Gallery Project Gallery=1.2
Gallery Project Gallery=1.3.3
Gallery Project Gallery=1.2.3
Gallery Project Gallery=1.3.4
Remediation
Patch Available
Event History
Aug 1, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Aug 27, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0614?
CVE-2003-0614 has a medium severity level due to its potential to allow cross-site scripting attacks.
2
How do I fix CVE-2003-0614?
To fix CVE-2003-0614, upgrade to Gallery version 1.3.5 or later where the vulnerability has been patched.
3
Which versions of Gallery are affected by CVE-2003-0614?
Gallery versions 1.1 through 1.3.4 are vulnerable to CVE-2003-0614.
4
What type of vulnerability is CVE-2003-0614?
CVE-2003-0614 is a cross-site scripting (XSS) vulnerability affecting the search.php script.
5
Can CVE-2003-0614 be exploited remotely?
Yes, CVE-2003-0614 can be exploited remotely, allowing attackers to insert arbitrary web scripts.