Fedora 9 : gallery2-2.3-1.fc9 (2008-11258)

New version, multiple fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 8 : gallery2-2.3-1.fc8 (2008-11230)

New version, multiple security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

FreeBSD Ports: gallery

The remote host is missing an update to the system as announced in the referenced advisory. VID fc9e73b2-8685-11dd-bb64-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID fc9e73b2-8685-11dd-bb64-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-4130

CVE-2008-4130 is an XSS in Gallery 2.x before 2.2.6. A crafted Flash animation can interact with the embedding page to inject arbitrary script/HTML, exploited when a user loads a page containing the animation. The vulnerability affects Gallery 2.x (pre-2.2.6) and is reflected in Fedora/Red Hat ad...

CVE-2008-4130

Cross-site scripting XSS vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted Flash animation, related to the ability of the animation to "interact with the embedding page."...

CVE-2007-4130

CVE-2007-4130 affects Red Hat Enterprise Linux 4 on Itanium (ia64): the Linux kernel (2.6.x) fails to handle page faults during NUMA memory access, allowing a local unprivileged user to trigger a denial of service (system panic) via invalid arguments to set_mempolicy in MPOL_BIND. Connected advis...

CVE-2006-4130

The CVE-2006-4130 issue is a PHP remote file inclusion in the Remository component (com_remository) for Mambo/Joomla! (3.25 and earlier). When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL passed to mosConfig_absolute_path. The vulnerability affects the...

CVE-2005-4130

Technical details are not publicly available in the provided documents for CVE-2005-4130. This entry is marked UNVERIFIABLE/PRERELEASE; monitor for updates from reliable sources.

CVE-2005-4130

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be...