CVE

Id
19191  
CVE No.
CVE-2006-3087  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in EZGallery 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pUserID, (2) aid, (3) aname, (4) uid, and (5) m parameter in (a) common/galleries.asp; (6) aid, (7) aname, (8) uid, (9) m, (10) gp, and (11) g parameter in (b) common/pupload.asp; and (12) msg, (13) fn and (14) gp parameter in (c) common/upload.asp.  
Phase
Assigned (20060619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
171330 19191 CVE-2006-3087 MISC:http://pridels0.blogspot.com/2006/06/ezgallery-v15-xss-vuln.html  View
171331 19191 CVE-2006-3087 VUPEN:ADV-2006-2298  View
171332 19191 CVE-2006-3087 URL:http://www.vupen.com/english/advisories/2006/2298  View
171333 19191 CVE-2006-3087 OSVDB:26372  View
171334 19191 CVE-2006-3087 URL:http://www.osvdb.org/26372  View
171335 19191 CVE-2006-3087 OSVDB:26370  View
171336 19191 CVE-2006-3087 URL:http://www.osvdb.org/26370  View
171337 19191 CVE-2006-3087 OSVDB:26371  View
171338 19191 CVE-2006-3087 URL:http://www.osvdb.org/26371  View
171339 19191 CVE-2006-3087 SECUNIA:20553  View
171340 19191 CVE-2006-3087 URL:http://secunia.com/advisories/20553  View
171341 19191 CVE-2006-3087 XF:ezgallery-multiple-scripts-xss(27066)  View

Related JVN