CVE-2006-3087: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EZGallery 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pUserID, 2 aid, 3 aname, 4 uid, and 5 m parameter in a common/galleries.asp; 6 aid, 7 aname, 8 uid, 9 m, 10 gp, and 11 g parameter in b...