CVE

Id
62187  
CVE No.
CVE-2013-2240  
Status
Candidate  
Description
lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
622133 62187 CVE-2013-2240 MLIST:[oss-security] 20130704 Re: CVE Request -- gallery3 (3.0.9): Fixing two security flaws  View
622134 62187 CVE-2013-2240 URL:http://www.openwall.com/lists/oss-security/2013/07/04/11  View
622135 62187 CVE-2013-2240 MISC:http://galleryproject.org/gallery_3_0_9  View
622136 62187 CVE-2013-2240 CONFIRM:http://sourceforge.net/apps/trac/gallery/ticket/2073  View
622137 62187 CVE-2013-2240 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=981197  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21956 JVNDB-2013-003531 Moodle の rss/file.php における重要な block 情報を取得される脆弱性 Moodle の rss/file.php は、RSS トークンを使用して他のユーザに偽装される場合を考慮して適切に RSS フィードを実装していないため、重要な block 情報を取得される脆弱性が存在します。 CVE-2013-2245 62187 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003531.html  View