CVE-2006-2796

CVE-2006-2796 describes a reflected cross-site scripting (XSS) vulnerability in the gallery.php component of Captivate 1.0, where the page parameter is reflected in an error message and can be exploited by remote attackers to inject arbitrary HTML/Script. Affected software is Captivate 1.0 (galle...