CVE-2006-5598

Cross-site scripting XSS vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter...

CVE-2006-5598

The CVE-2006-5598 entry concerns the GOOP Gallery 2.0 (and possibly earlier versions) with a cross-site scripting vulnerability in index.php. The issue arises from unsanitized input through the image parameter, allowing injection of arbitrary HTML/script. Affected versions are prior to 2.0.3. The...