GLSA-200601-13 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-13 Gallery: XSS vulnerability Peter Schumacher discovered that Gallery fails to sanitize the fullname set by users, possibly leading to a cross-site scripting vulnerability. Impact : By setting a specially crafted fullname,...

[SA18557] Gallery Fullname Script Insertion Vulnerability

TITLE: Gallery Fullname Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18557 VERIFY ADVISORY: http://secunia.com/advisories/18557/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Gallery 1.x http://secunia.com/product/1933/ DESCRIPTION: A vulnerabili...