← Database

CVE-2004-1106

MEDIUM CVSS: 6.8 Published: 2005-01-10 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php.

Affected Platforms

Gentoo LinuxGallery Project Gallery

Weakness Type

NVD-CWE-Other

References