CVE-2006-1411

Published: Mar 28, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters.

Affected (1)

Products: Xigla: Absolute Image Gallery Xe

Xigla

1 product

Absolute Image Gallery Xe

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xigla Absolute Image Gallery Xe	Up to 2.0

References (10)

http://pridels0.blogspot.com/2006/03/absolute-image-gallery-xe-20-xss-vuln.html

Source: cve@mitre.org

http://www.osvdb.org/24214

Source: cve@mitre.org

http://www.securityfocus.com/bid/18712

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1103

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25466

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/03/absolute-image-gallery-xe-20-xss-vuln.html