Back to search
CVE-2006-3020
Published: Jun 15, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple cross-site scripting (XSS) vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) image and (2) PublisedDate parameters.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20537
third-party-advisory
x_refsource_SECUNIA
ADV-2006-2299
vdb-entry
x_refsource_VUPEN
http://pridels0.blogspot.com/2006/06/ws-album-xss-vuln.html
x_refsource_MISC
ws-album-fullphoto-xss(27056)
vdb-entry
x_refsource_XF
20060615 WS-Album - "PublisedDate" is correct, source verify, new vector
mailing-list
x_refsource_VIM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now