CVEvulnerability
CVE-2008-6988
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) galleryid parameter to gallery.php, and the (2) size or (3) imageid parameters to show.php.
Affected configurations
• ezphotogallery ezphotogallery 2.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/31774 Vendor Advisory
- http://www.osvdb.org/48313 www.osvdb.org
- http://www.osvdb.org/48314 www.osvdb.org
- http://www.osvdb.org/48316 www.osvdb.org
- http://www.securityfocus.com/archive/1/496220/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45050 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6428 www.exploit-db.com
- http://secunia.com/advisories/31774 Vendor Advisory
- http://www.osvdb.org/48313 www.osvdb.org
- http://www.osvdb.org/48314 www.osvdb.org
- http://www.osvdb.org/48316 www.osvdb.org
- http://www.securityfocus.com/archive/1/496220/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45050 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6428 www.exploit-db.com