Description
Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- FEDORA-2012-5814 vendor-advisory
- FEDORA-2012-5832 vendor-advisory
- 48767 third-party-advisory
- http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2
- FEDORA-2012-5777 vendor-advisory
- 52996 vdb-entry
- FEDORA-2012-5822 vendor-advisory
- FEDORA-2012-5787 vendor-advisory
- gallery-unspec-xss(74837) vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=812045
- FEDORA-2012-5806 vendor-advisory