CVE-2007-2098 Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) pic and (2) gal parameters.
MediumCVSS 6.8
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) pic and (2) gal parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wabbit php gallery | = 0.9 | No fix listed |
References
- 34994 vdb-entry
- 24943 third-party-advisory
- 2574 third-party-advisory
- 20070416 Wabbit PHP Gallery v0.9 Cross Site Scripting mailing-list
- 23526 vdb-entry
- wabbit-showpic-xss(33717) vdb-entry