Unscored severity · published Apr 18, 2007
CVE-2007-2098
Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) pic and (2)…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) pic and (2) gal parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WP
Wabbit Php Gallery · Wabbit
0.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2098
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2098
osvdb.org
http://osvdb.org/34994
secunia.com
http://secunia.com/advisories/24943
securityreason.com
http://securityreason.com/securityalert/2574
www.securityfocus.com
http://www.securityfocus.com/archive/1/465985/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/23526
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33717
More from Wabbit Php Gallery
–
CVE-2006-6185
Directory traversal vulnerability in script.php in Wabbit PHP Gallery 0.9 allows remote attackers to read arbitrary files via a