Vulnerabilities (CVE)

Filtered by vendor Webgeneius Subscribe
Filtered by product Goop Gallery
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-5598 1 Webgeneius 1 Goop Gallery 2024-02-28 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter.
CVE-2006-5188 1 Webgeneius 1 Goop Gallery 2024-02-28 5.0 MEDIUM N/A
Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors.