EUVD-2008-4871

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. NOTE: some of these details are obtained from third party...

CVE-2008-4892

CVE-2008-4892 affects Planetluc MyGallery 1.7.2 and earlier (likely all versions before 1.8.1). The vulnerability is a Cross‑Site Scripting (XSS) in gallery.inc.php that allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. Impact is an in‑context script injecti...