Gallery Unspecified Remote Vulnerabilities

medium Nessus Network Monitor Plugin ID 3304

Synopsis

The remote host is vulnerable to an HTML Injection attack.

Description

The remote host is running the Gallery web-based photo album. This version of Gallery is vulnerable to an 'unspecified' flaw. While the exact details of the flaw are unknown, the vendor has released version 2.0.2 as a fix. In addition, this version of Gallery is supposedly vulnerable to an HTML injection flaw. An attacker exploiting this flaw would need to be able to convince a user to browse to a malicious URI. Successful exploitation could lead to the loss of potentially confidential data

Solution

Upgrade to version 2.0.2 or 1.5.2 or higher.

Plugin Details

Severity: Medium

ID: 3304

Family: CGI

Published: 11/29/2005

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 4.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 5.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:gallery_project:gallery

Reference Information

CVE: CVE-2005-4021, CVE-2005-4022, CVE-2005-4023, CVE-2006-0330

BID: 15614, 16334

Detections

Analytics