CVEvulnerability
CVE-2006-3032
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 (trial), allow remote attackers to inject arbitrary web script or HTML via the (1) catname and (2) total parameters in (a) displaypic.asp, and the (3) catname parameter in (b) displaythumbs.asp.
Affected configurations
• pensacola web designs xtreme asp photo gallery 1.05
• pensacola web designs xtreme asp photo gallery 2.0
References
- http://pridels0.blogspot.com/2006/06/xtreme-asp-photo-gallery-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/20604 Vendor Advisory
- http://www.osvdb.org/26398 www.osvdb.org
- http://www.osvdb.org/26399 www.osvdb.org
- http://www.vupen.com/english/advisories/2006/2292 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27033 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/06/xtreme-asp-photo-gallery-xss-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/20604 Vendor Advisory
- http://www.osvdb.org/26398 www.osvdb.org
- http://www.osvdb.org/26399 www.osvdb.org
- http://www.vupen.com/english/advisories/2006/2292 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27033 exchange.xforce.ibmcloud.com