CVE-2006-2294

EPSS 2.1%

Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in (1) index.php and (2) galerie.php. NOTE: this issue might be resultant from directory traversal.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/27841unverified exploitdbwww.exploit-db.com/exploits/27840unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html http://secunia.com/advisories/19995 http://www.osvdb.org/25443 http://www.osvdb.org/25444 http://www.securityfocus.com/bid/17896 http://www.vupen.com/english/advisories/2006/1699