VulnerabilityModified
CVE-2006-5598
Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter.
MEDIUM 4.3EPSS 1.19%
Does this matter?
Lower severity and a low EPSS score (1.19%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.19% probability · 66th percentile
- CISA KEV
- Not listed
- Affected
- webgeneius/goop gallery
- Source
- cve@mitre.org
References
- http://lostmon.blogspot.com/2006/10/goop-gallery-image-param-cross-site.htmlExploit
- http://securitytracker.com/id?1017081Exploit
- http://webgeneius.com/index.php?mod=blog&id=49Patch, URL Repurposed
- http://www.securityfocus.com/bid/20554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29643
- http://lostmon.blogspot.com/2006/10/goop-gallery-image-param-cross-site.htmlExploit
- http://securitytracker.com/id?1017081Exploit
- http://webgeneius.com/index.php?mod=blog&id=49Patch, URL Repurposed
- http://www.securityfocus.com/bid/20554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29643
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.