Unscored severity · published Apr 12, 2006
CVE-2006-1750
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Autogallery 0.41 allow remote attackers to inject arbitrary web script or HTML via the (1) pic or (2) show…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Autogallery 0.41 allow remote attackers to inject arbitrary web script or HTML via the (1) pic or (2) show parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AU
Autogallery · Jmb Software
0.41 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1750
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1750
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0220.html
Vendor Advisory
http://secunia.com/advisories/19629
www.elitemexico.org
http://www.elitemexico.org/12.txt
www.securityfocus.com
http://www.securityfocus.com/bid/17480
Vendor Advisory
http://www.vupen.com/english/advisories/2006/1328
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25756