Vulnerabilities > Mmgallery

DATE CVE VULNERABILITY TITLE RISK
2006-11-26 CVE-2006-6119 Information Disclosure vulnerability in Mmgallery 1.55
mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which reveals the installation path in various error messages.
network
low complexity
mmgallery
5.0
2006-11-26 CVE-2006-6118 Cross-Site Scripting vulnerability in Mmgallery 1.55
Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
network
mmgallery
6.8