VulnerabilityModified

CVE-2006-0330

Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).

MEDIUM 4.3EPSS 1.84%

Does this matter?

Lower severity and a low EPSS score (1.84%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 1.84% probability · 78th percentile
CISA KEV: Not listed
Affected: gallery project/gallery
Source: cve@mitre.org

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285
http://gallery.menalto.com/page/gallery_1_5_2_release
http://secunia.com/advisories/18557Patch, Vendor Advisory
http://secunia.com/advisories/18627Patch, Vendor Advisory
http://secunia.com/advisories/21502
http://www.gentoo.org/security/en/glsa/glsa-200601-13.xmlPatch, Vendor Advisory
http://www.osvdb.org/22660Patch
http://www.securityfocus.com/bid/16334Patch
http://www.us.debian.org/security/2006/dsa-1148
http://www.vupen.com/english/advisories/2006/0282
https://exchange.xforce.ibmcloud.com/vulnerabilities/24247
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285
http://gallery.menalto.com/page/gallery_1_5_2_release
http://secunia.com/advisories/18557Patch, Vendor Advisory
http://secunia.com/advisories/18627Patch, Vendor Advisory
http://secunia.com/advisories/21502
http://www.gentoo.org/security/en/glsa/glsa-200601-13.xmlPatch, Vendor Advisory
http://www.osvdb.org/22660Patch
http://www.securityfocus.com/bid/16334Patch
http://www.us.debian.org/security/2006/dsa-1148
http://www.vupen.com/english/advisories/2006/0282
https://exchange.xforce.ibmcloud.com/vulnerabilities/24247

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.