EUVD-2006-3020

Malware in sbrugna...

CVE-2006-6247: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to 1 slideshow.asp or 2 thumbnails.asp...

CVE-2006-3023

Multiple cross-site scripting XSS vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 s and 2 block parameters...

CVE-2006-3023: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 s and 2 block parameters...