CVE-2008-3511

Softbiz Image Gallery - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to inject arbitrary web script or HTML via the (1) latest parameter to (a) index.php, (b) images.php, (c) suggest_image.php, and (d) image_desc.php; and the (2) msg parameter to index.php, images.php, and suggest_image.php, and (e) index.php, (f) adminhome.php, (g) config.php, (h) changepassword.php, (i) cleanup.php, (j) browsecats.php, and (k) images.php in admin/. NOTE: the image_desc.php/msg vector is covered by CVE-2006-1660. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (9)

exploitdb WRITEUP VERIFIED
by sl4xUz · textwebappsphp
https://www.exploit-db.com/exploits/32171
exploitdb WRITEUP VERIFIED
by sl4xUz · textwebappsphp
https://www.exploit-db.com/exploits/32174
exploitdb WRITEUP VERIFIED
by sl4xUz · textwebappsphp
https://www.exploit-db.com/exploits/32178
exploitdb WRITEUP VERIFIED
by sl4xUz · textwebappsphp
https://www.exploit-db.com/exploits/32173
exploitdb WRITEUP VERIFIED
by sl4xUz · textwebappsphp
https://www.exploit-db.com/exploits/32176
exploitdb WRITEUP VERIFIED
by sl4xUz · textwebappsphp
https://www.exploit-db.com/exploits/32175
exploitdb WRITEUP VERIFIED
by sl4xUz · textwebappsphp
https://www.exploit-db.com/exploits/32177
exploitdb WRITEUP VERIFIED
by sl4xUz · textwebappsphp
https://www.exploit-db.com/exploits/32170
exploitdb WRITEUP VERIFIED
by sl4xUz · textwebappsphp
https://www.exploit-db.com/exploits/32172

Scores

EPSS 0.0020
EPSS Percentile 42.2%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

softbiz/image_gallery

Timeline

Published Aug 07, 2008
Tracked Since Feb 18, 2026