Unscored CVE-2006-2796 EUVD-2006-2793GHSA-3p3c-fq8f-wj3w

Cross-site scripting (XSS) vulnerability in gallery.php in Captivate 1.0 allows remote attackers to inject arbitrary web script or HTML via…

Published Jun 3, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in gallery.php in Captivate 1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter, which is reflected in an error message.

References

18072 vdb-entry
1020 third-party-advisory
20060521 Captivate 1.0 - XSS Vuln mailing-list
captivate-gallery-xss(26589) vdb-entry