Directory traversal

Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 userlanguage and 2 usertemplate parameters to a init.inc.php, and b the userlanguage parameter to isadmin.inc.php...

CVE-2008-4702

Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 userlanguage and 2 usertemplate parameters to a init.inc.php, and b the userlanguage parameter to isadmin.inc.php...

CVE-2008-4591: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 langaccessforbiden and 2 langidenttitle parameters...