CVE-2006-5188

CVE-2006-5188 describes a directory traversal vulnerability in the download.php of the webGENEius GOOP Gallery 2.0.2. The vulnerability could allow remote attackers to read or list data from certain files or directories via unspecified vectors. The available sources (NVD/NVD detail, CVE listings)...

CVE-2006-5598

The CVE-2006-5598 entry concerns the GOOP Gallery 2.0 (and possibly earlier versions) with a cross-site scripting vulnerability in index.php. The issue arises from unsanitized input through the image parameter, allowing injection of arbitrary HTML/script. Affected versions are prior to 2.0.3. The...