CVE-2005-4022

Опубликовано: 05 дек. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.

Ссылки

http://secunia.com/advisories/17747
Patch
Vendor Advisory
http://www.osvdb.org/21221
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/418200/100/0/threaded
http://www.securityfocus.com/bid/15614
http://www.vupen.com/english/advisories/2005/2681
http://secunia.com/advisories/17747
Patch
Vendor Advisory
http://www.osvdb.org/21221
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/418200/100/0/threaded
http://www.securityfocus.com/bid/15614
http://www.vupen.com/english/advisories/2005/2681

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gallery_project:gallery:2.0:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_alpha1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_alpha2:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_alpha3:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_alpha4:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_beta1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_beta2:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_beta3:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_rc1:*:*:*:*:*:*:*

cpe:2.3:a:gallery_project:gallery:2.0_rc2:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00463

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-4022

debian

больше 19 лет назад

Cross-site scripting (XSS) vulnerability in the "Add Image From Web" f ...

GHSA-xxm5-g29j-f9vq

github

больше 3 лет назад