CVE-2006-5598

Exploit

EPSS 0.52%
Veröffentlicht 28.10.2006 01:07:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Webgeneius ≫ Goop Gallery Version2.0

Webgeneius ≫ Goop Gallery Version2.0.1

Webgeneius ≫ Goop Gallery Version2.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.52%	0.66

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://lostmon.blogspot.com/2006/10/goop-gallery-image-param-cross-site.html

Exploit

http://securitytracker.com/id?1017081

Exploit

http://webgeneius.com/index.php?mod=blog&id=49

Patch

URL Repurposed

http://www.securityfocus.com/bid/20554

https://exchange.xforce.ibmcloud.com/vulnerabilities/29643

https://nvd.nist.gov/vuln/detail/CVE-2006-5598

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5598

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5598

EUVD