Description

Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) a parameter in i.php, and the (2) album and (3) image parameters in index.php.

Remediation

References

CVE-2006-2187

Related Vulnerabilities

e107 Other Vulnerability (CVE-2005-3521)

Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2017-3169)

WordPress Plugin Google Map Remote Code Execution (1.0)

WordPress Plugin AdWizz 'link' Parameter Cross-Site Scripting (1.0)

PrestaShop Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-39525)

Severity

Medium

Classification

CVE-2006-2187

Tags

Missing Update Known Vulnerabilities