Vulnerability   
Search   
    Search 202850 CVE descriptions
and 87302 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.11810
Category:CGI abuses
Title:gallery xss
Summary:NOSUMMARY
Description:Description:

The remote host is running the Gallery web-based photo album.

There is a flaw in this version which makes it vulnerable to
a cross site scripting attack which may allow an attacker
to steal the cookies from the legitimate users of this system.

Solution : Upgrade to Gallery 1.3.4p1 or newer
Risk factor : Low

Cross-Ref: BugTraq ID: 8288
Common Vulnerability Exposure (CVE) ID: CVE-2003-0614
Bugtraq: 20030727 Gallery XSS security advisory (with fix and patch instructions) (Google Search)
http://www.securityfocus.com/archive/1/330676
Bugtraq: 20030902 GLSA: gallery (200309-06) (Google Search)
http://marc.info/?l=bugtraq&m=106252092421469&w=2
Bugtraq: 20040101 Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity (Google Search)
http://www.securityfocus.com/archive/1/348641/30/21790/threaded
Debian Security Information: DSA-355 (Google Search)
http://www.debian.org/security/2003/dsa-355
CopyrightThis script is Copyright (C) 2003 Tenable Network Security

This is only one of 87302 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.