GCVE - cpe:2.3:a:webgeneius:goop_gallery:2.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:webgeneius:goop_gallery:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-5598`	vulnerable	2026-06-08 04:49:20.857699	Details available Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter. Published: 2006-10-28T01:00:00.000Z Updated: 2024-08-07T19:55:53.623Z Open on db.gcve.eu Reference links http://lostmon.blogspot.com/2006/10/goop-gallery-image-param-cross-site.html http://webgeneius.com/index.php?mod=blog&id=49 http://www.securityfocus.com/bid/20554 https://exchange.xforce.ibmcloud.com/vulnerabilities/29643 http://securitytracker.com/id?1017081	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5188`	vulnerable	2026-06-08 04:49:19.915062	Details available Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors. Published: 2006-10-06T19:00:00.000Z Updated: 2024-08-07T19:41:05.598Z Open on db.gcve.eu Reference links http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0004 http://securitytracker.com/id?1016983 http://www.securityfocus.com/archive/1/448258/100/100/threaded http://www.securityfocus.com/archive/1/447647/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/29339	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.