4.3

CVE-2003-0614

Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gallery Project ≫ Gallery Version 1.1
Gallery Project ≫ Gallery Version 1.2
Gallery Project ≫ Gallery Version 1.2.1
Gallery Project ≫ Gallery Version 1.2.1_p1
Gallery Project ≫ Gallery Version 1.2.2
Gallery Project ≫ Gallery Version 1.2.3
Gallery Project ≫ Gallery Version 1.2.4
Gallery Project ≫ Gallery Version 1.2.5
Gallery Project ≫ Gallery Version 1.3
Gallery Project ≫ Gallery Version 1.3.1
Gallery Project ≫ Gallery Version 1.3.2
Gallery Project ≫ Gallery Version 1.3.3
Gallery Project ≫ Gallery Version 1.3.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.94% 0.89
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=82&mode=thread&order=0&thold=0
http://marc.info/?l=bugtraq&m=106252092421469&w=2
http://www.debian.org/security/2003/dsa-355
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/330676
http://www.securityfocus.com/archive/1/348641/30/21790/threaded