CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 11CVE-2008-3511 – Softbiz Image Gallery - 'adminhome.php?msg' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2008-3511
07 Aug 2008 — Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to inject arbitrary web script or HTML via the (1) latest parameter to (a) index.php, (b) images.php, (c) suggest_image.php, and (d) image_desc.php; and the (2) msg parameter to index.php, images.php, and suggest_image.php, and (e) index.php, (f) adminhome.php, (g) config.php, (h) changepassword.php, (i) cleanup.php, (j) browsecats.php, and (k) images.php in admin/. NOTE: the image_desc.php/ms... • https://www.exploit-db.com/exploits/32174 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 6CVE-2006-1659 – SoftBiz Image Gallery - 'images.php?cid' SQL Injection
https://notcve.org/view.php?id=CVE-2006-1659
07 Apr 2006 — Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid parameter in suggest_image.php, (4) img_id parameter in insert_rating.php, and (5) cid parameter in images.php. • https://www.exploit-db.com/exploits/27546 •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2006-1660
https://notcve.org/view.php?id=CVE-2006-1660
07 Apr 2006 — Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. • http://secunia.com/advisories/19523 •