PT-2007-3440 · Wabbit · Wabbit Php Gallery

Published 2007-04-18 · Updated 2018-10-16 · CVE-2007-2098

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Wabbit PHP Gallery version 0.9

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the pic and gal parameters in the showpic.php file.

Recommendations For Wabbit PHP Gallery version 0.9, consider validating and sanitizing user input for the pic and gal parameters to prevent arbitrary web script or HTML injection. As a temporary workaround, restrict access to the showpic.php file until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-2098

Affected Products

Wabbit Php Gallery

References · 8

• 🔥 https://exploit-db.com/exploits/29865 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2098 · Security Note
• http://securityreason.com/securityalert/2574 · Note
• http://osvdb.org/34994 · Note
• http://secunia.com/advisories/24943 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33717 · Note
• http://securityfocus.com/bid/23526 · Note
• http://securityfocus.com/archive/1/465985/100/0/threaded · Note