CVE-2005-2734
Published Aug 30, 2005
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B821AEB0-7C0C-407E-9CCB-EEB16E1A2719"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F517D6BA-9793-4A4D-BDC6-2F5349F0B354"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E876B0F6-8363-43E0-8E00-E55B04A05F7F"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4131E313-CB18-45D7-9F4C-096EB0337B7D"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4.3_pl2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A2D7CE2-1461-4D01-A4B1-9E6F7A68FB2F"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4.4_pl2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFA0436A-8294-44B4-B7D1-62A73BE4DFAC"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4.4_pl3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9125286-5A7D-4A1B-B5C4-888581B9798C"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4.4_pl4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54143C9E-0EB0-4137-A01A-3E8C8A7412F0"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4.4_pl5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89382A13-8E5D-44DC-8D6B-8FD8DCAFE525"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C999044-00FE-4DE1-A235-F036FC9AE09A"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36A59F6E-A44B-4949-8487-CB089BF1CE5B"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B6B3525-BD38-47CF-B60A-F392FABDA357"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD453B4B-75B9-476D-B1A6-65AB8E09107E"
},
{
"criteria": "cpe:2.3:a:gallery_project:gallery:1.5.1_rc2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AFCAB08-BADA-4231-96E2-B73462A803D2"
}
],
"operator": "OR"
}
]
}
]