Gallery User Name HTML Injection Vulnerability

Bugtraq ID:	16334
Class:	Input Validation Error
CVE:	CVE-2006-0330
Remote:	Yes
Local:	No
Published:	Jan 18 2006 12:00AM
Updated:	Aug 10 2006 08:05PM
Credit:	Peter Schumacher is credited with the discovery of this vulnerability.
Vulnerable:	Gentoo Linux Gallery Gallery 1.5.2 -RC2 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1
Not Vulnerable:	Gallery Gallery 1.5.2

Gallery User Name HTML Injection Vulnerability

Gallery is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would execute in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

Gallery User Name HTML Injection Vulnerability

An exploit is not required.

Gallery User Name HTML Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Please see the referenced advisories for more information.

Gallery User Name HTML Injection Vulnerability

References:

• Gallery 1.5.2-pl2 XSS Advisory (Gallery)
  
• Gallery Product Page (Gallery)