Unscored CVE-2006-0493 EUVD-2006-0500GHSA-6q45-g6rp-rx3g

Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arbitrary web script or…

Published Feb 1, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture.

References

389 third-party-advisory
16428 vdb-entry
17374 third-party-advisory
20060130 XSS flaw in MG2 Image Gallery (v.0.5.1) mailing-list
mg2-name-xss(24378) vdb-entry