CVE-2006-3036

The CVE-2006-3036 entry concerns multiple XSS flaws in 35mmslidegallery 6.0. The vulnerabilities affect the web interface where user-supplied data can be injected via the (1) imgdir parameter in index.php and (2) the w, h, and t parameters in popup.php. The underlying issue is insufficient input ...