27 matches found
GLSA-200411-10 : Gallery: XSS vulnerability
The remote host is affected by the vulnerability described in GLSA-200411-10 Gallery: XSS vulnerability Jim Paris has discovered a cross-site scripting vulnerability in Gallery. Impact : By sending a carefully crafted URL, an attacker can inject and execute script code in the victim's browser...
[SA13071] Gallery Unspecified Script Insertion Vulnerability
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
GLSA-200406-10 : Gallery: Privilege escalation vulnerability
The remote host is affected by the vulnerability described in GLSA-200406-10 Gallery: Privilege escalation vulnerability There is a vulnerability in the Gallery photo album software which may allow an attacker to gain administrator privileges within Gallery. A Gallery administrator has full acces...
[ GLSA 200406-10 ] Gallery: Privilege escalation vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200406-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
DSA-512 gallery - unauthenticated access
Bulletin has no description...
Gallery search.php searchstring Parameter XSS
The version of Gallery hosted on the remote web server is affected by a cross-site scripting attack due to a failure to properly sanitize user-supplied input to the 'searchstring' parameter of the 'search.php' script. A remote attacker may use this to steal the cookies from the legitimate users o...
DSA-138 gallery - remote exploit
Bulletin has no description...