Vulnerabilities

TI-2006-01946 CVE-2006-2001 · GHSA-w8qm-qm5m-qp68

Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote…

LOW 25

Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the p parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02352 Published 2006-04-25 No fix listed

TI-2006-01941 CVE-2006-1996 · GHSA-frwv-rwmf-hpfj

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p…

LOW 26

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01658 Published 2006-04-25 No fix listed

TI-2006-01940 CVE-2006-1995 · GHSA-x469-qm3r-q2rr

Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote…

LOW 30

Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0448 Published 2006-04-25 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote…

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p…

Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote…