Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-0330

Опубликовано: 21 янв. 2006
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gallery_project:gallery:1.3.4:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.5.1_rc2:*:*:*:*:*:*:*
cpe:2.3:a:gallery_project:gallery:1.5.2_rc2:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01345
Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

debian логотип

CVE-2006-0330

debian
почти 20 лет назад

Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allow ...

github логотип

GHSA-4chh-684c-357m

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).

EPSS

Процентиль: 78%
0.01345
Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other