GCVE - cpe:2.3:a:gphotos:gphotos:1.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gphotos:gphotos:1.5:*:*:*:*:*:*:*

part: a version: 1.5 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6248`	vulnerable	2026-06-08 04:49:22.381982	Details available index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which reveals the full path in an error message. Published: 2006-12-04T11:00:00.000Z Updated: 2024-08-07T20:19:35.113Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30390 http://www.securityfocus.com/archive/1/452025/100/200/threaded http://www.securityfocus.com/archive/1/452099/100/200/threaded http://securityreason.com/securityalert/1951	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2397`	vulnerable	2026-06-08 04:49:06.499132	Details available Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) rep parameter to (a) index.php or (b) diapo.php or (2) image parameter to (c) affich.php. NOTE: item 1a might be resultant from directory traversal. Published: 2006-05-16T01:00:00.000Z Updated: 2024-08-07T17:51:04.296Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/17967 http://www.vupen.com/english/advisories/2006/1806 http://www.osvdb.org/25499 https://exchange.xforce.ibmcloud.com/vulnerabilities/26426 http://www.osvdb.org/25497	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.