CVE-2006-0330

2006-01-2100:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0330

cross-site scripting

xss

vulnerability

gallery

web script

html

nvd

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.5%

JSON

Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).

CPENameOperatorVersion
gallery_project:gallerygallery project galleryeq1.4.3_pl2
gallery_project:gallerygallery project galleryeq1.4.4_pl2
gallery_project:gallerygallery project galleryeq1.4_pl1
gallery_project:gallerygallery project galleryeq1.4.2
gallery_project:gallerygallery project galleryeq1.5.1
gallery_project:gallerygallery project galleryeq1.5
gallery_project:gallerygallery project galleryeq1.4.4_pl3
gallery_project:gallerygallery project galleryeq1.4.1
gallery_project:gallerygallery project galleryeq1.5.1_rc2
gallery_project:gallerygallery project galleryeq1.4.3_pl1

CPE	Name	Operator	Version
gallery_project:gallery	gallery project gallery	eq	1.4.3_pl2
gallery_project:gallery	gallery project gallery	eq	1.4.4_pl2
gallery_project:gallery	gallery project gallery	eq	1.4_pl1
gallery_project:gallery	gallery project gallery	eq	1.4.2
gallery_project:gallery	gallery project gallery	eq	1.5.1
gallery_project:gallery	gallery project gallery	eq	1.5
gallery_project:gallery	gallery project gallery	eq	1.4.4_pl3
gallery_project:gallery	gallery project gallery	eq	1.4.1
gallery_project:gallery	gallery project gallery	eq	1.5.1_rc2
gallery_project:gallery	gallery project gallery	eq	1.4.3_pl1