CVE

Id
17930  
CVE No.
CVE-2006-1826  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Snipe Gallery 3.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in view.php, (2) keyword parameter in search.php, and (3) image_id parameter in image.php. NOTE: it is possible that vectors 1 and 3 are resultant from SQL injection.  
Phase
Assigned (20060417)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
152699 17930 CVE-2006-1826 BUGTRAQ:20060415 Snipe Gallery <= 3.1.4 Multiple XSS  View
152700 17930 CVE-2006-1826 URL:http://www.securityfocus.com/archive/1/archive/1/431074/100/0/threaded  View
152701 17930 CVE-2006-1826 BUGTRAQ:20060416 Re: Snipe Gallery <= 3.1.4 Multiple XSS  View
152702 17930 CVE-2006-1826 URL:http://www.securityfocus.com/archive/1/archive/1/431123/100/0/threaded  View
152703 17930 CVE-2006-1826 BID:17543  View
152704 17930 CVE-2006-1826 URL:http://www.securityfocus.com/bid/17543  View
152705 17930 CVE-2006-1826 SECTRACK:1015947  View
152706 17930 CVE-2006-1826 URL:http://securitytracker.com/id?1015947  View
152707 17930 CVE-2006-1826 XF:snipe-view-image-xss(25803)  View

Related JVN