EUVD-2008-3497

Malware in sbrugna...

CVE-2006-1660

CVE-2006-1660 describes a Cross‑site Scripting (XSS) vulnerability in Softbiz Image Gallery (Photo Gallery), specifically in image_desc.php where an attacker can inject arbitrary script/HTML via the msg parameter. The vulnerability is documented with an external reference note and is corroborated...

CVE-2006-1660

Cross-site scripting XSS vulnerability in imagedesc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1659: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in imagedesc.php, 2 provided parameter in template.php, 3 cid parameter in suggestimage.php, 4 imgid parameter in insertrating.php, and 5 cid parameter i...

CVE-2006-1660: Undefined Security Weakness

Cross-site scripting XSS vulnerability in imagedesc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...