Gallery Multiple Vulnerabilities

low Nessus Network Monitor Plugin ID 2533

Synopsis

The remote host is vulnerable to a Cross-Site Scripting (XSS) attack.

Description

The remote host is running the Gallery web-based photo album.
There are various flaws in the remote version of this software that may allow an attacker to perform a cross-site scripting attack using the remote host, or to exploit an information disclosure flaw to gain more knowledge about the remote system.

Solution

No solution is known at this time.

Plugin Details

Severity: Low

ID: 2533

Family: CGI

Published: 1/18/2005

Updated: 3/6/2019

Nessus ID: 16185

Risk Information

VPR

Risk Factor: Low

Score: 3.0

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS v3

Risk Factor: Low

Base Score: 3.7

Temporal Score: 3.6

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:X

Reference Information

CVE: CVE-2005-0220

BID: 12292, 12286

Detections

Analytics