CVE-2008-6988
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Easy Photo Gallery是一款基于PHP的WEB应用程序。 Easy Photo Gallery(又称Ezphotogallery)2.1版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(1)脚本gallery.php的galleryid参数，(2) 脚本show.php的size参数 (3) 脚本 show.php的imageid参数注入任意的web脚本和HTML。
Public Exploits 1
ExploitDB · 1
EDB-6428#CVE-2008-6988 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2008-6988
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) galleryid parameter to gallery.php, and the (2) size or (3) imageid parameters to show.php.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Easy Photo Gallery Zeeways ZEEPROPERTY 'viewprofile.php'多个跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Easy Photo Gallery是一款基于PHP的WEB应用程序。 Easy Photo Gallery(又称Ezphotogallery)2.1版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(1)脚本gallery.php的galleryid参数，(2) 脚本show.php的size参数 (3) 脚本 show.php的imageid参数注入任意的web脚本和HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2008-6988
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-6988
请登录查看更多情报信息。
Vendor Advisories for CVE-2008-6988 (6)
-
-
-
-
-
Easy Photo Gallery gallery.php and show.php cross-site scripting CVE-2008-6988 Vulnerability Report vdb-entry x_refsource_XF
-
Exploits & Public PoCs for CVE-2008-6988 (1)
Same Patch Batch · n/a · 2009-08-18 · 47 CVEs total
| CVE-2009-2851 | WordPress 管理员操作界面 跨站脚本攻击漏洞 | |
| CVE-2009-2854 | WordPress 权限许可和访问控制漏洞 | |
| CVE-2009-1872 | Adobe ColdFusion Server 服务器 多个跨站脚本攻击漏洞 | |
| CVE-2009-1875 | Adobe ColdFusion 多个跨站脚本攻击漏洞 | |
| CVE-2009-1876 | Adobe ColdFusion 敏感信息泄露漏洞 | |
| CVE-2009-1877 | Adobe ColdFusion 跨站脚本攻击漏洞 | |
| CVE-2009-1878 | Adobe ColdFusion 会话固定漏洞 | |
| CVE-2009-2856 | sun solaris 信息泄露漏洞 | |
| CVE-2009-1874 | Adobe Jrun 管理控制台 多个跨站脚本攻击漏洞 | |
| CVE-2009-2852 | WordPress WP-Syntax 'test/index.php'远程PHP代码执行漏洞 | |
| CVE-2009-2853 | wordpress 权限许可漏洞 | |
| CVE-2009-2850 | nasa_goddard_space_flight_center common_data_format 缓冲区溢出漏洞 | |
| CVE-2009-2849 | Linux kernel md驱动本地拒绝服务漏洞 | |
| CVE-2009-2848 | Linux kernel execve函数本地拒绝服务漏洞 | |
| CVE-2009-2847 | Linux Kernel kernel/signal.c do_sigaltstack函数敏感信息泄露漏洞 | |
| CVE-2009-2846 | Linux Kernel eisa_eeprom_read函数绕过安全检查漏洞 | |
| CVE-2009-2844 | Linux Kernel cfg80211空指针引用拒绝服务漏洞 | |
| CVE-2008-7003 | The Rat CMS 'login.php' 多个SQL注入漏洞 | |
| CVE-2008-7002 | PHP 多个函数 访问控制漏洞 | |
| CVE-2008-7001 | Creative Mind Creator CMS 任意文件上传漏洞 |
Showing top 20 of 47 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2008-6988
No comments yet