Cross-Site Scripting Vulnerability in Next Generation Image Gallery by NextGen
CVE-2006-0086

Currently unrated

Key Information:

Vendor: Next Generation Image Gallery
Status: Next Generation Image Gallery
Vendor: CVE Published:; 5 January 2006

🔔 Create Next Generation Image Gallery Vulnerability Alert

What is CVE-2006-0086?

The index.php file in the Next Generation Image Gallery version 0.0.1 Lite Edition contains a cross-site scripting (XSS) vulnerability. This flaw allows remote attackers to inject arbitrary web scripts or HTML into the application via the 'page' parameter. If exploited, this vulnerability can lead to unauthorized actions performed on behalf of the user and the potential for data theft.

References

http://www.osvdb.org/22202

vdb-entryx_refsource_OSVDB

http://www.vupen.com/english/advisories/2006/0037

vdb-entryx_refsource_VUPEN

http://osvdb.org/ref/22/22202-nextgen.txt

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 5, 2006
Vulnerability Reserved
Jan 5, 2006

CVE-2006-0086 Data

JSON