CVE-2005-0220

Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2005-0075

prefs.php in SquirrelMail before 1.4.4, with registerglobals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers...

[SA13962] SquirrelMail Three Vulnerabilities

TITLE: SquirrelMail Three Vulnerabilities SECUNIA ADVISORY ID: SA13962 VERIFY ADVISORY: http://secunia.com/advisories/13962/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: SquirrelMail 1.x http://secunia.com/product/288/...

PT-2004-2078 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery versions 1.4.4-pl3 and earlier Description: A cross-site scripting XSS issue allows remote attackers to execute arbitrary web script or HTML via specially formed URLs, possibly via the include parameter in "index.php". Recommendations...

Gallery < 1.4.4-p12 Unspecified HTML Injection

Binary data 2389.prm...

[SA13040] Caudium HTTP Request Processing Denial of Service

TITLE: Caudium HTTP Request Processing Denial of Service SECUNIA ADVISORY ID: SA13040 VERIFY ADVISORY: http://secunia.com/advisories/13040/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Caudium 1.x http://secunia.com/product/4196/ DESCRIPTION: A vulnerability has been...

Gallery 1.4.4 - Remote Server-Side Script Execution

source: https://www.securityfocus.com/bid/10968/info A vulnerability is reported to exist in Gallery that may allow a remote attacker to execute malicious scripts on a vulnerable system. This issue is a design error that occurs due to the 'settimelimit' function. The issue presents itself becuase...