Unrated severityNVD Advisory· Published Feb 12, 2007· Updated Jun 16, 2026

CVE-2007-0876

Description

Cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624 allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Qdig/Qdig3 versions
cpe:2.3:a:qdig:qdig:1.2.9.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:qdig:qdig:1.2.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:qdig:qdig:2006-06-24_dev:*:*:*:*:*:*:*
- (no CPE)range: 1.2.9.3, devel-20060624

Patches

Vulnerability mechanics

References

www.securityfocus.com/archive/1/459791/100/0/threadednvdPatch
osvdb.org/32194nvd
secunia.com/advisories/24110nvd
sourceforge.net/project/shownotes.phpnvd
www.securityfocus.com/archive/1/459664/100/0/threadednvd
www.securityfocus.com/bid/22510nvd
www.vupen.com/english/advisories/2007/0555nvd
exchange.xforce.ibmcloud.com/vulnerabilities/32421nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000