Vulnerabilities > CVE-2006-2080 - Cross-Site Scripting vulnerability in Verosky Media Instant Photo Gallery 1.0.2

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
verosky-media
NVD
Published: 2006-04-27
Updated: 2018-10-18

Summary

SQL injection vulnerability in portfolio_photo_popup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the count_click function in includes/functions/fns_std.php. NOTE: this issue could produce resultant XSS.

Vulnerable Configurations

Part Description Count
Application
Verosky_Media
1

References