exploitDog

CVE-2006-3023

Опубликовано: 15 июн. 2006

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) block parameters.

Ссылки

http://pridels0.blogspot.com/2006/06/uphotogallery-xss-vuln.html
http://secunia.com/advisories/20606
Vendor Advisory
http://www.vupen.com/english/advisories/2006/2307
https://exchange.xforce.ibmcloud.com/vulnerabilities/27034
http://pridels0.blogspot.com/2006/06/uphotogallery-xss-vuln.html
http://secunia.com/advisories/20606
Vendor Advisory
http://www.vupen.com/english/advisories/2006/2307
https://exchange.xforce.ibmcloud.com/vulnerabilities/27034

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:uapplication:uphotogallery:*:*:*:*:*:*:*:*

Версия до 1.1 (включая)

EPSS

Процентиль: 64%

0.0118

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-78mf-rxgw-mx64

github

больше 4 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) block parameters.

EPSS

Процентиль: 64%

0.0118

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other