Vulnerabilities > MY Photo Scrapbook

DATE CVE VULNERABILITY TITLE RISK
2006-06-13 CVE-2006-2993 Input Validation vulnerability in My Photo Scrapbook
Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in (1) Displayview.asp and (2) Details_Photo_bv.asp.
network
low complexity
my-photo-scrapbook
7.5
2006-06-13 CVE-2006-2992 Input Validation vulnerability in My Photo Scrapbook
Cross-site scripting (XSS) vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the key_m parameter.
4.3