CVE-2006-2187

Multiple cross-site scripting XSS vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 a parameter in i.php, and the 2 album and 3 image parameters in index.php...