23130Third-party advisory
http://secunia.com/advisories/23130 CVE-2006-6118
MMGallery 1.55 - 'Thumbs.php' Cross-Site Scripting
Record summary
CVE-2006-6118 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMMGallery 1.55 - 'Thumbs.php' Cross-Site ScriptingExploitDB exploitby Al7ejaz HackerNot analyzed1 file
References
61917Third-party advisory
http://securityreason.com/securityalert/1917 1017283vdb entry
http://securitytracker.com/id?1017283 20061124 mmgallery Multiple vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/452558/100/0/threaded 21281vdb entry
http://www.securityfocus.com/bid/21281 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-6118