CVE-2006-6936

The CVE-2006-6936 entry describes a cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery. The vulnerability is triggered by user-supplied input in two vectors: (1) the catname parameter to displaypic.asp and (2) the search field, enabling remote attackers to inject arbitrary HTML/...