CVE-2023-3538

A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 is the identifier assigned to this vulnerability.

• CWE-79

• https://vuldb.com/?ctiid.233290Third Party Advisory
• https://vuldb.com/?id.233290Third Party Advisory
• https://vuldb.com/?ctiid.233290Third Party Advisory
• https://vuldb.com/?id.233290Third Party Advisory

Published

Jul 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35373Mono Authenticode Validation Spoofing Vulnerability5.3
• CVE-2023-35374Paint 3D Remote Code Execution Vulnerability7.8
• CVE-2023-35376Microsoft Message Queuing (MSMQ) Denial of Service Vulnerabi…6.5
• CVE-2023-35377Microsoft Message Queuing (MSMQ) Denial of Service Vulnerabi…6.5
• CVE-2023-35378Windows Projected File System Elevation of Privilege Vulnera…7
• CVE-2023-35379Reliability Analysis Metrics Calculation Engine (RACEng) Ele…7.8
• CVE-2023-35380Windows Kernel Elevation of Privilege Vulnerability7.8
• CVE-2023-35381Windows Fax Service Remote Code Execution Vulnerability8.8
• CVE-2023-35382Windows Kernel Elevation of Privilege Vulnerability7.8
• CVE-2023-35383Microsoft Message Queuing Information Disclosure Vulnerabili…7.5
• CVE-2023-35384Windows HTML Platforms Security Feature Bypass Vulnerability6.5
• CVE-2023-35385Microsoft Message Queuing (MSMQ) Remote Code Execution Vulne…9.8