VYPR
Unrated severityNVD Advisory· Published Feb 12, 2007· Updated Apr 23, 2026

CVE-2007-0876

CVE-2007-0876

Description

Cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624 allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI.

Affected products

2
  • Qdig/Qdig2 versions
    cpe:2.3:a:qdig:qdig:1.2.9.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qdig:qdig:1.2.9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:qdig:qdig:2006-06-24_dev:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.