CVE-2007-2806 | BDVDB-2026-24311 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) galix_cat_detail, (2) galix_gal_detail, and (3) galix_cat_detail_sort parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://redlevel.org/wp-content/uploads/2007/05/galix.txt
http://osvdb.org/36253
http://www.securityfocus.com/bid/24066
http://secunia.com/advisories/25324

Exploit#

No public exploit known

History#

Version 12007-05-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.