CVE-2004-1106

Description

Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via specially formed URLs, possibly via the include parameter in index.php.

Risk Information

Base Score

7.1

MODERATE

Vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS Score

Exploitation Probability

1.631

Associated Vulnerability

No records found

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234