Vulnerabilities > Xigla > Absolute Image Gallery XE > Medium

DATE CVE VULNERABILITY TITLE RISK
2008-06-18 CVE-2008-2766 Cross-Site Scripting vulnerability in Xigla Absolute Image Gallery XE
Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) admin/search.asp and (2) gallery.asp.
network
xigla CWE-79
4.3
2006-03-28 CVE-2006-1411 Cross-Site Scripting vulnerability in Absolute Image Gallery XE
Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters.
network
xigla
4.3
2005-12-16 CVE-2005-4295 Cross-Site Scripting vulnerability in Xigla Absolute Image Gallery XE 2.0
Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter.
network
xigla
4.3