Vulnerability CVE-2006-5057
Published: 2006-09-27   Modified: 2012-02-12

Description:
Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php.

See advisories in our WLB2 database:
Topic
Author
Date
Low
PhotoStore Multiple Cross-Site Scripting Vulnerabilities
meto5757
01.10.2006

Type:

CWE-Other

CVSS2 => (AV:N/AC:H/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.1/10
6.4/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Ktools.net -> Photostore 

 References:
http://securityreason.com/securityalert/1640
http://www.securityfocus.com/archive/1/446909/100/0/threaded
http://www.securityfocus.com/bid/20172
http://www.vupen.com/english/advisories/2006/3781
Copyright 2024, cxsecurity.com

 

Back to Top