CVE-2006-3032

no score yetEPSS 1.3%

Multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 (trial), allow remote attackers to inject arbitrary web script or HTML via the (1) catname and (2) total parameters in (a) displaypic.asp, and the (3) catname parameter in (b) displaythumbs.asp.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2006-06-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

pensacola_web_designs:xtreme_asp_photo_gallery

References

http://pridels0.blogspot.com/2006/06/xtreme-asp-photo-gallery-xss-vuln.html
http://secunia.com/advisories/20604
http://www.osvdb.org/26398
http://www.osvdb.org/26399
http://www.vupen.com/english/advisories/2006/2292

Check your stack JSON