Unscored CVE-2007-1109 EUVD-2007-1106GHSA-2x3m-vr25-pm56

Multiple cross-site scripting (XSS) vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML vi…

Published Feb 26, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) login or (2) mail_address field in Register.php, or the (3) search_author, (4) mode, (5) start_year, (6) end_year, or (7) date_type field in Search.php, a different vulnerability than CVE-2006-1674. NOTE: 1.6.2 and other versions might also be affected.

References

33762 vdb-entry
2298 third-party-advisory
20070224 Phpwebgallery-1.4.1, Multiple Cross Site Scripting mailing-list
24308 third-party-advisory
22711 vdb-entry
phpwebgallery-register-search-xss(32687) vdb-entry
33761 vdb-entry