VulnerabilityModified
CVE-2006-6936
Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via (1) the catname parameter to displaypic.asp or (2) the search field.
MEDIUM 6.8EPSS 1.79%
Does this matter?
Lower severity and a low EPSS score (1.79%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via (1) the catname parameter to displaypic.asp or (2) the search field. NOTE: vector 1 likely overlaps CVE-2006-3032.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.79% probability · 77th percentile
- CISA KEV
- Not listed
- Affected
- pensacola web designs/xtremeasp photogallery
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/2148
- http://www.securityfocus.com/archive/1/451786/100/0/threaded
- http://www.securityfocus.com/bid/21138Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30327
- http://securityreason.com/securityalert/2148
- http://www.securityfocus.com/archive/1/451786/100/0/threaded
- http://www.securityfocus.com/bid/21138Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30327
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.