CVE-2006-2294

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2294

Dynamic Galerie 1.0 is affected by a Cross‑Site Scripting (XSS) vulnerability that can be triggered via the pfad parameter in index.php and galerie.php. The issue is likely related to directory traversal, enabling injection of arbitrary script/HTML by remote attackers. Affects the pfad handling i...