1. CVE-Search
  2. CVE-2005-2734
ID CVE-2005-2734
Summary Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
References
Vulnerable Configurations
  • cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gallery_project:gallery:1.5.1_rc2:*:*:*:*:*:*:*
    cpe:2.3:a:gallery_project:gallery:1.5.1_rc2:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 11-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bid 14668
bugtraq 20050826 Multiple PHP Images Galleries EXIF Metadata XSS Vulnerabilities
confirm http://sourceforge.net/project/shownotes.php?release_id=352576
debian DSA-1148
misc http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285
sectrack 1014800
secunia
  • 16594
  • 21502
xf photopost-exif-xss(22020)
Last major update 11-07-2017 - 01:32
Published 30-08-2005 - 11:45
Last modified 11-07-2017 - 01:32
Back to Top