What’s Vulnerable › Vulnerabilities
CVE-2006-1674
- Severity: low (CVSS 2.6 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2006-04-10 · updated 2026-06-16
Description
Cross-site scripting (XSS) vulnerability in search.php in PHPWebGallery 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-1675.
Affected products
- Phpwebgallery: 1.4.1
References
Get alerted when CVE-2006-1674 or the next vulnerability affects your stack