Red Hat Bugzilla – Bug 429308
CVE-2007-6687 Gallery2 cross site scripting
Last modified: 2008-01-18 13:00:32 EST
Common Vulnerabilities and Exposures assigned an identifier CVE-2007-6687 to the following vulnerability:
Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject arbitrary web script or HTML via crafted filenames to the (1) Core or (2) add-item modules; or via (3) HTTP PROPPATCH in the WebDAV module.
This was fixed in gallery2-2.2.4-1
Fedora 8: FEDORA-2007-4778
Fedora 7: FEDORA-2007-4777