Vulnerabilities (CVE)

Filtered by vendor Webgeneius Subscribe
Filtered by product Goop Gallery
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-5188 1 Webgeneius 1 Goop Gallery 2025-04-09 5.0 MEDIUM N/A
Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors.
CVE-2006-5598 1 Webgeneius 1 Goop Gallery 2025-04-09 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter.