PT-2007-3440 · Wabbit · Wabbit Php Gallery

Publicado 2007-04-18 · Atualizado 2018-10-16 · CVE-2007-2098

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Wabbit PHP Gallery version 0.9

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the pic and gal parameters in the showpic.php file.

Recommendations For Wabbit PHP Gallery version 0.9, consider validating and sanitizing user input for the pic and gal parameters to prevent arbitrary web script or HTML injection. As a temporary workaround, restrict access to the showpic.php file until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-2098

Produtos afetados

Wabbit Php Gallery

Referências · 8

• 🔥 https://exploit-db.com/exploits/29865 · Exploit
• http://securityreason.com/securityalert/2574 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2098 · Nota de Segurança
• http://osvdb.org/34994 · Nota
• http://secunia.com/advisories/24943 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33717 · Nota
• http://securityfocus.com/bid/23526 · Nota
• http://securityfocus.com/archive/1/465985/100/0/threaded · Nota