Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-0330

Fixed in a distro release EPSS 2%

Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).

Published 2006-01-21 · CVE record · OSV

Products: gallery_project gallery

Distro releases

ReleasePackageFixed in
Debian 3.1gallery1.5-1sarge2