← Back

Webgeneius

webgeneius

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Goop Gallery
goop_gallery
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-5598
1Webgeneius
1Goop Gallery
Apr 23, 2026
Oct 28, 2006
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter.
CVE-2006-5188
1Webgeneius
1Goop Gallery
Apr 23, 2026
Oct 10, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors.