CVE-2005-0219: XSS

Published Feb 6, 2005

Updated

Multiple cross-site scripting (XSS) vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the index field in addcomment.php, (2) setalbumName, (3) slideindex, (4) slidefull, (5) slideloop, (6) slidepause, (7) slidedir fields in slideshowlow.php, or (8) username field in search.php.

Affected Software

1 affected component

Gallery Project Gallery=1.3.4_pl1

Remediation

Patch Available

http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147

Event History

Feb 6, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0219?

CVE-2005-0219 is considered to have a medium severity due to the potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2005-0219?

To fix CVE-2005-0219, upgrade to a patched version of Gallery that addresses these XSS vulnerabilities.

What kind of attacks can CVE-2005-0219 facilitate?

CVE-2005-0219 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts or HTML.

Which versions of Gallery are affected by CVE-2005-0219?

CVE-2005-0219 affects Gallery version 1.3.4-pl1.

What are the affected components in CVE-2005-0219?

The affected components in CVE-2005-0219 include add_comment.php and various fields in slideshow functionalities.