Vulnerabilities > Xigla > Absolute Image Gallery XE > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2008-06-18 | CVE-2008-2766 | Cross-Site Scripting vulnerability in Xigla Absolute Image Gallery XE Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) admin/search.asp and (2) gallery.asp. | 4.3 |
2006-03-28 | CVE-2006-1411 | Cross-Site Scripting vulnerability in Absolute Image Gallery XE Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters. network xigla | 4.3 |
2005-12-16 | CVE-2005-4295 | Cross-Site Scripting vulnerability in Xigla Absolute Image Gallery XE 2.0 Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter. network xigla | 4.3 |