CVE-2012-1113

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.67%

Published

Apr 22, 2012

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Weaknesses (CWE)

CWE-79

Affected Products (6)

maian · galleryvulnerable

menalto · galleryvulnerable

maian · galleryvulnerable

References (20)

http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078618.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078752.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078816.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078851.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078873.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078925.html

http://secunia.com/advisories/48767

http://www.securityfocus.com/bid/52996

https://bugzilla.redhat.com/show_bug.cgi?id=812045

https://exchange.xforce.ibmcloud.com/vulnerabilities/74837