[32979] in bugtraq
Re: Gallery v1.3.3 Cross Site Scripting Vulnerabillity
daemon@ATHENA.MIT.EDU (Matt Zimmerman)
Thu Jan 1 15:47:54 2004
Date: Wed, 31 Dec 2003 21:42:29 -0800
From: Matt Zimmerman <mdz@debian.org>
To: bugtraq@securityfocus.com
Message-ID: <20040101054228.GI1365@alcor.net>
Mail-Followup-To: bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <000701c3ced8$ffddf560$1792db3e@fucku>
On Tue, Dec 30, 2003 at 03:29:49PM +0200, The-Insider wrote:
> #######################################################################
>
> Application: Gallery
> Vendors:
> http://gallery.sourceforge.net
> http://gallery.menalto.com
> Versions: <= 1.3.3
> Platforms: Windows/Unix
> Bug: Cross Site Scripting Vulnerabillity
> Risk: Low
> Exploitation: Remote with browser
> Date: 30 Dec 2003
> Author: Rafel Ivgi, The-Insider
> e-mail: the_insider@mail.com
> web: http://theinsider.deep-ice.com
>
> #######################################################################
Also known as CAN-2003-0614 from July, fixed in DSA-355.
--
- mdz
