← Database

CVE-2007-5292

MEDIUM CVSS: 4.3 Published: 2007-10-09 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in photos.cfm in Directory Image Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the backwardDirectory parameter.

Affected Platforms

Splitside Directory Image Gallery

Weakness Type

CWE-79

References