EUVD-2006-3017

Malware in sbrugna...

CVE-2006-3020

CVE-2006-3020 concerns WS-Album 1.1 and earlier, where the vulnerability is in FullPhoto.asp. The two parameters, image and PublisedDate , can be exploited to inject arbitrary web script or HTML via reflected/stored XSS as described in the CVE entry. The affected software is WS-Album (FullPhoto.a...

CVE-2006-3020

Multiple cross-site scripting XSS vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 image and 2 PublisedDate parameters...

CVE-2006-3020: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 image and 2 PublisedDate parameters...