ISOMAN

CVE

CVE-2004-1106

Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php.

Severity
MEDIUM
CVSS
6.8
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
Gentoo2026.05.31 amd64 minimal installunknownsource
Gentoo2026.05.10 amd64 liveguiunknownsource
Gentoo2026.06.07 arm64 minimal installunknownsource
Gentoo2026.05.05 x86 minimal installunknownsource
Gentoo2026.06.11 powerpc minimal installunknownsource
Gentoo2026.06.11 powerpc minimal-dist installunknownsource
Gentoo2026.05.27 ppc64le minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal-dist installunknownsource
Gentoo2026.06.13 sparc64 minimal installunknownsource
Gentoo2026.06.13 sparc64 minimal-dist installunknownsource
Gentoo2026.06.14 arm64 minimal installunknownsource
Gentoo2026.06.16 x86 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal-dist installunknownsource
Gentoo2026.06.21 arm64 minimal installunknownsource
Gentoo2026.06.23 x86 minimal installunknownsource
Gentoo2026.06.25 powerpc minimal installunknownsource
Gentoo2026.06.25 powerpc minimal-dist installunknownsource
Gentoo2026.07.05 amd64 minimal installunknownsource
Gentoo2026.07.05 arm64 minimal installunknownsource
Gentoo2026.07.07 x86 minimal installunknownsource
Gentoo2026.07.09 powerpc minimal installunknownsource
Gentoo2026.07.09 powerpc minimal-dist installunknownsource
Gentoo2026.07.08 sparc64 minimal installunknownsource
Gentoo2026.07.08 sparc64 minimal-dist installunknownsource
Gentoo2026.07.12 amd64 minimal installunknownsource
Gentoo2026.07.12 amd64 liveguiunknownsource
Gentoo2026.07.12 arm64 minimal installunknownsource
Gentoo2026.07.14 x86 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal-dist installunknownsource
Gentoo2026.07.16 powerpc minimal installunknownsource
Gentoo2026.07.16 powerpc minimal-dist installunknownsource
Gentoo2026.07.19 arm64 minimal installunknownsource
Gentoo2026.07.21 x86 minimal installunknownsource
Gentoo2026.07.23 powerpc minimal installunknownsource
Gentoo2026.07.23 powerpc minimal-dist installunknownsource
Gentoo2026.07.22 sparc64 minimal installunknownsource
Gentoo2026.07.22 sparc64 minimal-dist installunknownsource
Gentoo2026.07.26 arm64 minimal installunknownsource
Gentoo2026.07.28 x86 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal-dist installunknownsource
Gentoo2026.07.30 powerpc minimal installunknownsource
Gentoo2026.07.30 powerpc minimal-dist installunknownsource
Gentoo2026.08.02 arm64 minimal installunknownsource
Gentoo2026.08.04 x86 minimal installunknownsource
Gentoo2026.08.06 powerpc minimal installunknownsource
Gentoo2026.08.06 powerpc minimal-dist installunknownsource
Gentoo2026.08.09 arm64 minimal installunknownsource
Gentoo2026.08.11 amd64 minimal installunknownsource
Gentoo2026.08.11 amd64 liveguiunknownsource
Gentoo2026.08.11 x86 minimal installunknownsource
Gentoo2026.08.13 powerpc minimal installunknownsource
Gentoo2026.08.13 powerpc minimal-dist installunknownsource
Gentoo2026.08.05 sparc64 minimal installunknownsource
Gentoo2026.08.05 sparc64 minimal-dist installunknownsource
Gentoo2026.08.16 amd64 minimal installunknownsource
Gentoo2026.08.16 arm64 minimal installunknownsource
Gentoo2026.08.18 x86 minimal installunknownsource
Gentoo2026.08.20 powerpc minimal installunknownsource
Gentoo2026.08.20 powerpc minimal-dist installunknownsource
Gentoo2026.08.19 sparc64 minimal installunknownsource
Gentoo2026.08.19 sparc64 minimal-dist installunknownsource
Gentoo2026.08.23 amd64 minimal installunknownsource
Gentoo2026.08.23 amd64 liveguiunknownsource
Gentoo2026.08.23 arm64 minimal installunknownsource
Gentoo2026.08.25 x86 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal-dist installunknownsource
Gentoo2026.08.27 powerpc minimal installunknownsource
Gentoo2026.08.27 powerpc minimal-dist installunknownsource
Gentoo2026.08.30 amd64 minimal installunknownsource
Gentoo2026.08.30 amd64 liveguiunknownsource
Gentoo2026.08.30 arm64 minimal installunknownsource
Gentoo2026.08.30 x86 minimal installunknownsource
Gentoo2026.09.01 x86 minimal installunknownsource
Gentoo2026.09.03 powerpc minimal installunknownsource
Gentoo2026.09.03 powerpc minimal-dist installunknownsource
Gentoo2026.09.06 amd64 minimal installunknownsource
Gentoo2026.09.06 arm64 minimal installunknownsource
Gentoo2026.09.06 amd64 liveguiunknownsource
Gentoo2026.09.08 x86 minimal installunknownsource

References

  1. http://g3cko.info/gallery2-4.patch
  2. http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=142&mode=thread&order=0&thold=0
  3. http://www.debian.org/security/2005/dsa-642
  4. http://www.gentoo.org/security/en/glsa/glsa-200411-10.xml
  5. http://www.securityfocus.com/bid/11602
  6. https://exchange.xforce.ibmcloud.com/vulnerabilities/17948
  7. http://g3cko.info/gallery2-4.patch
  8. http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=142&mode=thread&order=0&thold=0
  9. http://www.debian.org/security/2005/dsa-642
  10. http://www.gentoo.org/security/en/glsa/glsa-200411-10.xml
  11. http://www.securityfocus.com/bid/11602
  12. https://exchange.xforce.ibmcloud.com/vulnerabilities/17948