Vulnerabilities > CVE-2007-3412 - Cross-Site Scripting vulnerability in Clicktech Clickgallery 5.1

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

clicktech

NVD

Published: 2007-06-26

Updated: 2017-07-29

Summary

Cross-site scripting (XSS) vulnerability in edit_image.asp in ClickGallery Server 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter.

Vulnerable Configurations

Part	Description	Count
Application	Clicktech Clicktech Clickgallery * Clicktech Clickgallery 5.1	2

References

http://osvdb.org/36371
http://pridels-team.blogspot.com/2007/06/clickgallery-server-vuln.html
http://secunia.com/advisories/25805
https://exchange.xforce.ibmcloud.com/vulnerabilities/35024