← Back

Mmgallery

mmgallery

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Mmgallery
mmgallery
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-6119
1Mmgallery
1Mmgallery
Apr 23, 2026
Nov 26, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which reveals the installation path in various error messages.
CVE-2006-6118
1Mmgallery
1Mmgallery
Apr 23, 2026
Nov 26, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary web script or HTML via the page parameter.