GCVE - cpe:2.3:a:gphotos:gphotos:1.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gphotos:gphotos:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-2398`	vulnerable	2026-06-08 04:49:06.500395	Details available Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the rep parameter. Published: 2006-05-16T01:00:00.000Z Updated: 2024-08-07T17:51:03.673Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/17967 http://www.vupen.com/english/advisories/2006/1806 http://secunia.com/advisories/20095 https://exchange.xforce.ibmcloud.com/vulnerabilities/26428 http://www.securityfocus.com/archive/1/452025/100/200/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2397`	vulnerable	2026-06-08 04:49:06.498602	Details available Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) rep parameter to (a) index.php or (b) diapo.php or (2) image parameter to (c) affich.php. NOTE: item 1a might be resultant from directory traversal. Published: 2006-05-16T01:00:00.000Z Updated: 2024-08-07T17:51:04.296Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/17967 http://www.vupen.com/english/advisories/2006/1806 http://www.osvdb.org/25499 https://exchange.xforce.ibmcloud.com/vulnerabilities/26426 http://www.osvdb.org/25497	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.