Security Advisory

CVE-2006-2187

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-05-04 10:00:00
Last updated 2024-08-07 17:43:28
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) a parameter in i.php, and the (2) album and (3) image parameters in index.php.