Lucene search

MitreCVE-2005-0221

HistoryFeb 06, 2005 - 5:00 a.m.

CVE-2005-0221

2005-02-0605:00:00

mitre

web.nvd.nist.gov

cve-2005-0221

cross-site scripting

xss

gallery 2.0 alpha

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.009

Percentile

83.0%

JSON

Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field.

Affected configurations

Nvd

Node

gallery_projectgalleryMatch2.0_alpha

VendorProductVersionCPE
gallery_projectgallery2.0_alphacpe:2.3:a:gallery_project:gallery:2.0_alpha:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gallery_project	gallery	2.0_alpha	cpe:2.3:a:gallery_project:gallery:2.0_alpha:::::::*

References

archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html

gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=147

marc.info/?l=bugtraq&m=110608459222364&w=2

theinsider.deep-ice.com/texts/advisory69.txt

exchange.xforce.ibmcloud.com/vulnerabilities/18938

exchange.xforce.ibmcloud.com/vulnerabilities/43472

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.009

Percentile

83.0%

JSON

Related for CVE-2005-0221