CVE-2007-2098

Published: Apr 18, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) pic and (2) gal parameters.

Affected (1)

Products: Wabbit: Wabbit Php Gallery

Wabbit

1 product

Wabbit Php Gallery

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wabbit Wabbit Php Gallery	Version 0.9

References (12)

http://osvdb.org/34994

Source: cve@mitre.org

http://secunia.com/advisories/24943

Source: cve@mitre.org

http://securityreason.com/securityalert/2574

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/465985/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23526

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33717

Source: cve@mitre.org

http://osvdb.org/34994