Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2005-0220

Published: 02/05/2005 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Subscribe to Gallery

Vulnerability Summary

Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote malicious users to inject arbitrary web script or HTML via the username field.

Vulnerable Product Search on Vulmon Subscribe to Product

gallery project gallery 1.4.4_pl2

References

NVD-CWE-Otherhttp://archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.htmlhttp://theinsider.deep-ice.com/texts/advisory69.txthttp://www.gentoo.org/security/en/glsa/glsa-200501-45.xmlhttp://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147http://secunia.com/advisories/13887/http://marc.info/?l=bugtraq&m=110608459222364&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/18938https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook