OwnCloud Server and Nextcloud Server Cross-Site Scripting Vulnerabilities

OwnCloud is a free and open source personal cloud storage solution from OwnCloud Germany.Nextcloud is an open source self-hosted file synchronization and sharing communication application platform.OwnCloud Server and Nextcloud Server are both a server version of one of them. A cross-site scriptin...

CVE-2016-7419

Affected software and scope: CVE-2016-7419 is an XSS vulnerability in the share.js file of the gallery application used by ownCloud Server < 9.0.4 and Nextcloud Server

i-Gallery 3.4 igallery.asp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21122/info The i-gallery application is prone to multiple-input validation vulnerabilities, including multiple cross-site scripting vulnerabilities and an HTML-injection issue, because the software fails to sufficiently...

CVE-2007-6691

CVE-2007-6691 affects Menalto Gallery

GLSA-200501-45 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-45 Gallery: XSS vulnerability Rafel Ivgi has discovered a cross-site scripting vulnerability where the 'username' parameter is not properly sanitized in 'login.php'. Impact : By sending a carefully crafted URL, an attacker...

Gallery134.txt

Application: Gallery Vendors: http://gallery.sourceforge.net Versions: v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Platforms: Windows Bug: Cross Site Scripting Vulnerability Exploitation: Remote With Browser Date: 17 Jan 2005 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website:...

[Full-Disclosure] Gallery v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Cross Site Scripting Vulnerability

Application: Gallery Vendors: http://gallery.sourceforge.net Versions: v1.3.4-pl1, v1.4.4-pl2, 2.0 Alpha Platforms: Windows Bug: Cross Site Scripting Vulnerability Exploitation: Remote With Browser Date: 17 Jan 2005 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website:...

Gallery Unspecified HTML Injection

The remote web server has a version of Gallery that could allow an attacker to inject arbitrary HTML tags via unspecified vectors. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid15624; scriptversion"1.23";...

Gallery < 2.2.4 Multiple Vulnerabilities

Binary data 4540.prm...

Gallery init.php Authentication Bypass

The version of Gallery hosted on the remote web server is affected by an authentication bypass issue. A flaw exists that may allow an attacker to bypass the authentication mechanism of this software by making requests including the options 'GALLERYEMBEDDEDINSIDE' and 'GALLERYEMBEDDEDINSIDETYPE'. ...

Gallery HTTP Global Variables File Inclusion

It is possible to make the remote host include PHP files hosted on a third-party server using the version of Gallery installed on the remote host. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 ...

Gallery index.php GALLERY_BASEDIR Parameter Remote File Inclusion

The version of Gallery hosted on the remote web server is affected by a remote file inclusion vulnerability due to the application failing to properly sanitize user-supplied input to the 'GALLERYBASEDIR' parameter of the 'index.php' script. An attacker may use this flaw to inject arbitrary code i...

Gallery includedir Parameter Remote File Inclusion

The version of Gallery installed on the remote host is affected by a remote file inclusion vulnerability due to the application failing to properly sanitize user-supplied input to the 'includedir' parameter. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shel...