CVE-2005-0220

MEDIUM 5.0CVE-2005-0220 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-0220 is a MEDIUM (CVSS 5.0) vulnerability affecting gallery (gallery project).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gallery gallery_project	`= 1.4.4_pl2`	No fix yet

Description

Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web script or HTML via the username field.

References

archives.neohapsis.com/archives/vulnwatch/2005-q1/0031.html · Vendor Advisory
gallery.menalto.com/modules.php · Patch
marc.info
secunia.com/advisories/13887 · Patch
theinsider.deep-ice.com/texts/advisory69.txt · Vendor Advisory
gentoo.org/security/en/glsa/glsa-200501-45.xml
exchange.xforce.ibmcloud.com/vulnerabilities/18938

More vulnerabilities in gallery

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gallery

gallery_project

= 1.4.4_pl2

No fix yet

More vulnerabilities in gallery

See all →