CVE-2008-1636

CVE-2008-1636 describes a cross-site scripting (XSS) vulnerability in the JV2 Quick Gallery 1.1 product, specifically in index.php via the f parameter. The connected NVD entry confirms the vulnerability allows remote attackers to inject arbitrary script/HTML through the f parameter, indicating in...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

spg-xss.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;::...

CVE-2006-1996

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message...

Design/Logic Flaw

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message...

CVE-2006-2001

CVE-2006-2001 affects Scry Gallery 1.1, with a cross-site scripting (XSS) flaw in index.php exploitable via the p parameter. The vulnerability’s CVSS v2 vector (AV:N/AC:M/Au:N/C:N/I:P/A:N) yields a base score of 4.3 (Medium). Impact is limited to partial integrity risk; confidentiality and availa...

CVE-2006-1996

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message...

CVE-2006-2001

Cross-site scripting XSS vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this is a different vulnerability than the directory traversal vector...

Scry Gallery 1.1 - index.php Cross-Site Scripting

Scry Gallery 1.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17668/info Scry Gallery is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

CVE-2003-0614

CVE-2003-0614 is a cross-site scripting (XSS) vulnerability in Gallery (web-based photo album) affecting Gallery 1.1 through 1.3.4. The vulnerability resides in search.php, where unsanitized input from the searchstring parameter can be exploited to inject arbitrary JavaScript into a victim’s brow...