Cross site scripting

Cross-site scripting XSS vulnerability in imagesarchive.asp in Uapplication Uphotogallery 1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the s parameter. NOTE: the thumbnails.asp vector is already covered by CVE-2006-3023...

CVE-2006-3023

CVE-2006-3023 describes multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp of the Uapplication Uphotogallery 1.1 (and earlier). The issue allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) block parameters. The public description confirms affec...