CVE-2007-6157

SimpleGallery 0.1.3 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrary web script or HTML via the album parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by JosS · textwebappsphp
https://www.exploit-db.com/exploits/30811

References (3)

Scores

EPSS 0.0125
EPSS Percentile 79.1%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

simplegallery/simplegallery

Timeline

Published Nov 29, 2007
Tracked Since Feb 18, 2026