Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php.

Gallery includes several cross-site scripting vulnerabilities that could allow malicious content to be injected.

Several vulnerabilities have been discovered in gallery, a web-based photo album written in PHP4. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities :

  - CAN-2004-1106     Jim Paris discovered a cross site scripting     vulnerability which allows code to be inserted by using     specially formed URLs.

  - CVE-NOMATCH

    The upstream developers of gallery have fixed several     cases of possible variable injection that could trick     gallery to unintended actions, e.g. leaking database     passwords.

The remote host is affected by the vulnerability described in GLSA-200411-10 (Gallery: XSS vulnerability)

    Jim Paris has discovered a cross-site scripting vulnerability in     Gallery.
  Impact :

    By sending a carefully crafted URL, an attacker can inject and execute     script code in the victim's browser window, and potentially compromise     the users gallery.
  Workaround :

    There is no known workaround at this time.

The remote host is running the Gallery web-based photo album.
There is a flaw in the remote version of this software that may allow an attacker to inject arbitrary HTML tags in the remote web server. 

The remote web server has a version of Gallery that could allow an attacker to inject arbitrary HTML tags via unspecified vectors.

ID	Name	Product	Family	Severity
18940	FreeBSD : gallery -- XSS (5752a0df-60c5-4876-a872-f12f9a02fa05)	Nessus	FreeBSD Local Security Checks	medium
16182	Debian DSA-642-1 : gallery - several vulnerabilities	Nessus	Debian Local Security Checks	medium
15644	GLSA-200411-10 : Gallery: XSS vulnerability	Nessus	Gentoo Local Security Checks	medium
2389	Gallery < 1.4.4-p12 Unspecified HTML Injection	Nessus Network Monitor	Web Servers	medium
15624	Gallery Unspecified HTML Injection	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2004-1106

medium

Tenable Plugins

medium

medium

medium

medium

medium