Pensacola Web Designs

pensacola_web_designs

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Xtremeasp Photogallery

xtremeasp_photogallery

Xtreme Asp Photo Gallery

xtreme_asp_photo_gallery

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-6937 1Pensacola Web Designs 1Xtremeasp Photogallery Apr 23, 2026 Jan 17, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter.
CVE-2006-6936 1Pensacola Web Designs 1Xtremeasp Photogallery Apr 23, 2026 Jan 17, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via (1) the catname parameter to displaypic.asp or (2) the search field. NOTE: vector 1...Show more Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via (1) the catname parameter to displaypic.asp or (2) the search field. NOTE: vector 1 likely overlaps CVE-2006-3032.Show less
CVE-2006-3032 1Pensacola Web Designs 1Xtreme Asp Photo Gallery Apr 16, 2026 Jun 15, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 (trial), allow remote attackers to inject arbitrary web script or HTML via the (1) catname and (2) total...Show more Multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 (trial), allow remote attackers to inject arbitrary web script or HTML via the (1) catname and (2) total parameters in (a) displaypic.asp, and the (3) catname parameter in (b) displaythumbs.asp.Show less
CVE-2004-2746 1Pensacola Web Designs 1Xtremeasp Photogallery Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.