CVE

Id
37105  
CVE No.
CVE-2008-6988  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) galleryid parameter to gallery.php, and the (2) size or (3) imageid parameters to show.php.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403210 37105 CVE-2008-6988 BUGTRAQ:20080910 Ezphotogallery 2.1 Multiple Vulnerabilities ( Xss/Login Bypass/Sql injection Exploit/File Disclosure)  View
403211 37105 CVE-2008-6988 URL:http://www.securityfocus.com/archive/1/archive/1/496220/100/0/threaded  View
403212 37105 CVE-2008-6988 MILW0RM:6428  View
403213 37105 CVE-2008-6988 URL:http://www.milw0rm.com/exploits/6428  View
403214 37105 CVE-2008-6988 OSVDB:48316  View
403215 37105 CVE-2008-6988 URL:http://www.osvdb.org/48316  View
403216 37105 CVE-2008-6988 OSVDB:48313  View
403217 37105 CVE-2008-6988 URL:http://www.osvdb.org/48313  View
403218 37105 CVE-2008-6988 OSVDB:48314  View
403219 37105 CVE-2008-6988 URL:http://www.osvdb.org/48314  View
403220 37105 CVE-2008-6988 SECUNIA:31774  View
403221 37105 CVE-2008-6988 URL:http://secunia.com/advisories/31774  View
403222 37105 CVE-2008-6988 XF:easyphotogallery-gallery-show-xss(45050)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42076 JVNDB-2009-003083 GreenSQL Firewall における SQL インジェクション保護メカニズムを回避される脆弱性 GreenSQL Firewall (greensql-fw) には、SQL インジェクション保護メカニズムを回避される脆弱性が存在します。 CVE-2008-6992 37105 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003083.html  View