Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).

Several remote vulnerabilities have been discovered in gallery, a web-based photo album. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2005-2734     A cross-site scripting vulnerability allows injection of     web script code through HTML or EXIF information.

  - CVE-2006-0330     A cross-site scripting vulnerability in the user     registration allows injection of web script code.

  - CVE-2006-4030     Missing input sanitising in the stats modules allows     information disclosure.

The remote host is affected by the vulnerability described in GLSA-200601-13 (Gallery: XSS vulnerability)

    Peter Schumacher discovered that Gallery fails to sanitize the     fullname set by users, possibly leading to a cross-site scripting     vulnerability.
  Impact :

    By setting a specially crafted fullname, an attacker can inject     and execute script code in the victim's browser window and potentially     compromise the user's gallery.
  Workaround :

    There is no known workaround at this time.

The remote host is running the Gallery web-based photo album.  This version of Gallery is vulnerable to an 'unspecified' flaw.  While the exact details of the flaw are unknown, the vendor has released version 2.0.2 as a fix.  In addition, this version of Gallery is supposedly vulnerable to an HTML injection flaw.  An attacker exploiting this flaw would need to be able to convince a user to browse to a malicious URI.  Successful exploitation could lead to the loss of potentially confidential data

ID	Name	Product	Family	Severity
22690	Debian DSA-1148-1 : gallery - several vulnerabilities	Nessus	Debian Local Security Checks	medium
20815	GLSA-200601-13 : Gallery: XSS vulnerability	Nessus	Gentoo Local Security Checks	medium
3304	Gallery Unspecified Remote Vulnerabilities	Nessus Network Monitor	CGI	medium

Detections

Analytics

CVE-2006-0330

medium

Tenable Plugins

medium

medium

medium