CVE-2006-2397
GPhotos <= 1.5 - Cross-Site Scripting via rep or image Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-2397. PoCs published by Morocco Security Team.
AI-analyzed exploit summary The provided text describes an XSS vulnerability in Gphotos due to improper input sanitization. It includes a basic example URL demonstrating the vulnerability but lacks executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) rep parameter to (a) index.php or (b) diapo.php or (2) image parameter to (c) affich.php. NOTE: item 1a might be resultant from directory traversal.
Exploits (3)
The provided text describes an XSS vulnerability in Gphotos due to improper input sanitization. It includes a basic example URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes an XSS vulnerability in Gphotos due to improper input sanitization. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes a vulnerability in Gphotos (CVE-2006-2397) involving XSS and information disclosure due to improper input sanitization. It includes a generic example URL demonstrating the XSS vulnerability but lacks executable exploit code.