CVE-2012-4343

概要

参考情報

• gallery.menalto.com/gallery_3_0_4
• lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html
• lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html

gallery のその他の脆弱性

• CVE-2013-2241中 5.0modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain se…
• CVE-2013-2240高 7.5lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecif…
• CVE-2013-2138高 7.5The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows…
• CVE-2012-4342中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML …
• CVE-2012-2405緊急 10.0Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a differe…