Published: 13/04/2006 Updated: 20/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 450

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote malicious users to inject arbitrary web script or HTML via the page parameter in (1) Classic.view/thumbnail.php, (2) Classic.view/gallery.php, (3) Classic.view/detail.php, or (4) Orange.view/detail.php; or (5) the name parameter in Orange.view/slideshow.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jetphotosoft.com jetphoto 1.0
jetphotosoft.com jetphoto 2.0
jetphotosoft.com jetphoto 2.1

source: wwwsecurityfocuscom/bid/17449/info JetPhoto is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context o ...

source: wwwsecurityfocuscom/bid/17449/info JetPhoto is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context ...

source: wwwsecurityfocuscom/bid/17449/info JetPhoto is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the con ...

source: wwwsecurityfocuscom/bid/17449/info JetPhoto is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the conte ...

CWE-79 http://www.securityfocus.com/bid/17449 http://secunia.com/advisories/19603 http://www.osvdb.org/24491 http://www.osvdb.org/24492 http://www.osvdb.org/24494 http://www.osvdb.org/24493 http://www.vupen.com/english/advisories/2006/1300 http://marc.info/?l=full-disclosure&m=114472089719033&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/25745 https://nvd.nist.gov https://www.exploit-db.com/exploits/27616/

CVE-2006-1760

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect