CVE-2006-5057

Published: Sep 28, 2006Modified: Apr 23, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php.

Affected (1)

Products: Ktools.net: Photostore

Ktools.net

1 product

Photostore

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ktools.net Photostore	All versions

References (10)

http://secunia.com/advisories/22122

Source: cve@mitre.org

http://securityreason.com/securityalert/1640

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/446909/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20172

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/3781

Source: cve@mitre.org

http://secunia.com/advisories/22122