CVE-2007-2098

CVE-2007-2098 affects Wabbit PHP Gallery 0.9. The XSS flaw is in showpic.php, exploitable via the pic and gal parameters, enabling remote attackers to inject arbitrary script/HTML. Connected sources (NVD, CVE lists) confirm the vulnerability description; no specific patch/version remediation is p...

CVE-2006-6185

CVE-2006-6185 affects Wabbit PHP Gallery 0.9. The vulnerability is a directory traversal in script.php, allowing remote attackers to read arbitrary files by supplying an encoded or plain '..' in the dir parameter to index.php. The NVD entry lists this flaw with a base score of 5.0 (Medium) and a ...