Vulnerabilities > Verosky Media > Instant Photo Gallery > 1.0

DATE	CVE	VULNERABILITY TITLE	RISK
2006-04-27	CVE-2006-2079	Cross-Site Scripting vulnerability in Verosky Media Instant Photo Gallery 1.0 Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. network verosky-media	4.3
2006-04-26	CVE-2006-2052	Cross-Site Scripting vulnerability in Verosky Media Instant Photo Gallery 1.0 Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. network verosky-media	5.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.