CVE Feed

    Dashboard / CVE / CVE-2007-6135

    CVE-2007-6135

    Cross-site scripting (XSS) vulnerability in phpslideshow.php in PHPSlideShow 0.9.9.2, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the directory parameter. NOTE: this issue was originally reported for toonchapter8.php, but this is probably a site-specific name, since the PHPSlideShow distribution does not contain that file.

    Published:Nov 27, 2007
    Last Modified:Apr 23, 2026
    EPS:Nov 27, 2007
    EPSS Score:0.0796
    CVSS Score:4.3

    Affected Products

    Vendor
    Phpslideshow
    Product
    Phpslideshow

    Exploits

    http://www.packetstormsecurity.org/0711-exploits/phpslideshow-xss.txthttp://www.packetstormsecurity.org/0711-exploits/phpslideshow-xss.txthttps://www.exploit-db.com/exploits/30806

    References

    http://secunia.com/advisories/27809
    http://www.packetstormsecurity.org/0711-exploits/phpslideshow-xss.txt
    http://www.securityfocus.com/archive/1/484192/100/0/threaded
    http://www.securityfocus.com/archive/1/484289/100/0/threaded
    http://www.securityfocus.com/archive/1/490968/100/0/threaded
    http://www.securityfocus.com/bid/26575
    http://www.securityfocus.com/bid/26576
    http://www.vupen.com/english/advisories/2007/3992
    https://exchange.xforce.ibmcloud.com/vulnerabilities/38638
    http://secunia.com/advisories/27809
    http://www.packetstormsecurity.org/0711-exploits/phpslideshow-xss.txt
    http://www.securityfocus.com/archive/1/484192/100/0/threaded
    http://www.securityfocus.com/archive/1/484289/100/0/threaded
    http://www.securityfocus.com/archive/1/490968/100/0/threaded
    http://www.securityfocus.com/bid/26575
    http://www.securityfocus.com/bid/26576
    http://www.vupen.com/english/advisories/2007/3992
    https://exchange.xforce.ibmcloud.com/vulnerabilities/38638

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High