CVE-2007-2806

Published: May 22, 2007Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) galix_cat_detail, (2) galix_gal_detail, and (3) galix_cat_detail_sort parameters.

Affected (1)

Products: Galix: Galix

Galix

1 product

Galix

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Galix Galix	Version 2.0

References (8)

http://osvdb.org/36253

Source: cve@mitre.org

http://redlevel.org/wp-content/uploads/2007/05/galix.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/25324

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/24066

Source: cve@mitre.org

Exploit

http://osvdb.org/36253

Source: af854a3a-2127-422b-91ae-364da2661108

http://redlevel.org/wp-content/uploads/2007/05/galix.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/25324

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/24066

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.