CVE-2006-3036

Published: Jun 15, 2006Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) imgdir parameter in (a) index.php, and the (2) w, (3) h, and (4) t parameters in (b) popup.php.

Affected (1)

Products: Andy Mack: 35mmslidegallery

Andy Mack

1 product

35mmslidegallery

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Andy Mack 35mmslidegallery	Version 6.0

References (14)

http://secunia.com/advisories/20652

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1100

Source: cve@mitre.org

http://www.osvdb.org/26507

Source: cve@mitre.org

http://www.osvdb.org/26508

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/436959/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18414

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/27127

Source: cve@mitre.org

http://secunia.com/advisories/20652