Vulnerabilities

TI-2006-06012 CVE-2006-6248 · GHSA-qr5h-m6gm-8wmc

index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an…

LOW 37

index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which reveals the full path in an error message.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01599 Published 2006-12-04 No fix listed

TI-2006-02334 CVE-2006-2398 · GHSA-mv27-mx2x-hxr7

Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote…

LOW 30

Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2006-05-16 No fix listed

TI-2006-02333 CVE-2006-2397 · GHSA-hrgg-3823-2rmg

Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow…

LOW 31

Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) rep parameter to (a) index.php or (b) diapo.php or (2) image parame…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02821 Published 2006-05-16 No fix listed

Vulnerabilities

Filters

index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an…

Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow…