Vulnerabilities > CVE-2006-1411 - Unspecified vulnerability in Xigla Absolute Image Gallery XE

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
xigla
NVD
Published: 2006-03-28
Updated: 2024-11-21

Summary

Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters.

Vulnerable Configurations

Part Description Count
Application
Xigla
1

References