Vulnerabilities > MY Photo Scrapbook
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2006-06-13 | CVE-2006-2993 | Input Validation vulnerability in My Photo Scrapbook Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in (1) Displayview.asp and (2) Details_Photo_bv.asp. | 7.5 |
2006-06-13 | CVE-2006-2992 | Input Validation vulnerability in My Photo Scrapbook Cross-site scripting (XSS) vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the key_m parameter. network my-photo-scrapbook | 4.3 |