Secunia

Tatercrispies has reported a vulnerability in Invision Gallery, which can be exploited by malicious people to conduct script insertion attacks.

The vulnerability is caused due to an input validation error in the image upload handling. This can exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site by uploading a specially crafted valid image containing embedded HTML and script code with an image file extension not matching the image type (e.g. a valid GIF file with a ".jpg" file extension).

This is related to:
SA17295

Successful exploitation requires that the malicious image is accessed directly in the Microsoft Internet Explorer browser (i.e. not referenced via an image tag).

Solution
Update to version 2.0.4.
Further details available in Customer Area

Provided and/or discovered by
Tatercrispies

Changelog
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area