First published: Mon Dec 05 2005(Updated: )
Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Gallery Project Gallery | =2.0 | |
Gallery Project Gallery | =2.0.1 | |
Gallery Project Gallery | =2.0_alpha1 | |
Gallery Project Gallery | =2.0_alpha2 | |
Gallery Project Gallery | =2.0_alpha3 | |
Gallery Project Gallery | =2.0_alpha4 | |
Gallery Project Gallery | =2.0_beta1 | |
Gallery Project Gallery | =2.0_beta2 | |
Gallery Project Gallery | =2.0_beta3 | |
Gallery Project Gallery | =2.0_rc1 | |
Gallery Project Gallery | =2.0_rc2 | |
Gallery Project Gallery | =2.0.1 | |
Gallery Project Gallery | =2.0_alpha4 | |
Gallery Project Gallery | =2.0_beta2 | |
Gallery Project Gallery | =2.0_rc2 | |
Gallery Project Gallery | =2.0_beta1 | |
Gallery Project Gallery | =2.0_alpha2 | |
Gallery Project Gallery | =2.0_alpha1 | |
Gallery Project Gallery | =2.0_rc1 | |
Gallery Project Gallery | =2.0_beta3 | |
Gallery Project Gallery | =2.0 | |
Gallery Project Gallery | =2.0_alpha3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.