First published: Thu Mar 09 2006(Updated: )
Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Gallery Project Gallery | =2.0.1 | |
Gallery Project Gallery | =2.0_alpha4 | |
Gallery Project Gallery | =2.0_beta2 | |
Gallery Project Gallery | =2.0.2 | |
Gallery Project Gallery | =2.0_alpha | |
Gallery Project Gallery | =2.0_beta1 | |
Gallery Project Gallery | =2.0_alpha2 | |
Gallery Project Gallery | =2.0_alpha1 | |
Gallery Project Gallery | =2.0_beta3 | |
Gallery Project Gallery | =2.0 | |
Gallery Project Gallery | =2.0_alpha3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.