CVE-2005-2734

Опубликовано: 30 авг. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:1.5.1_rc2:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00804

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-2734

debian

около 20 лет назад

Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earl ...

GHSA-p7fj-hjc3-prwh

github

больше 3 лет назад