Vulnerabilities > CVE-2006-2751 - Cross-Site Scripting vulnerability in Open Searchable Image Catalogue

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
open-searchable-image-catalogue
NVD
Published: 2006-06-01
Updated: 2018-10-18

Summary

Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary web scripts or HTML via the item_list parameter in search.php. Upgrade to version 0.7.0.1

Vulnerable Configurations

Part Description Count
Application
Open_Searchable_Image_Catalogue
1

References