CVE-2006-0330

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-21 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname).

Affected products

Gallery Plugin authors Gallery: 1.3.4, 1.4, 1.4.1, 1.4.2, 1.4.3_pl1, 1.4.3_pl2 (+10)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285
http://gallery.menalto.com/page/gallery_1_5_2_release
http://secunia.com/advisories/18557
http://secunia.com/advisories/18627
http://secunia.com/advisories/21502
http://www.gentoo.org/security/en/glsa/glsa-200601-13.xml
http://www.osvdb.org/22660
http://www.securityfocus.com/bid/16334
http://www.us.debian.org/security/2006/dsa-1148
http://www.vupen.com/english/advisories/2006/0282
https://exchange.xforce.ibmcloud.com/vulnerabilities/24247
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285

Get alerted when CVE-2006-0330 or the next vulnerability affects your stack