Skip to content
OpenAdvisories
Unscored DSA-1148-1 3 CVEs

gallery - several vulnerabilities

Published Aug 9, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 gallery 1.5-1sarge2

Vulnerabilities 3

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary w…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script…

  • Unscored —

    Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensit…