CVE-2007-0682

The CVE-2007-0682 vulnerability affects JV2 Folder Gallery 3.0.2 and earlier, where a PHP remote file inclusion flaw exists in theme/include_mode/template.php. An attacker can cause arbitrary PHP code execution by supplying a URL in the galleryfilesdir parameter. This is a server-side inclusion i...

CVE-2008-1634

CVE-2008-1634 concerns a Cross-site Scripting (XSS) vulnerability in the JV2 Folder Gallery 3.1 package, specifically in the index.php file. The flaw allows remote attackers to inject arbitrary web script or HTML through the image parameter. This is the extent of information provided: the vulnera...