CVE-2006-2913

CVE-2006-2913 describes a cross-site scripting (XSS) vulnerability in SelectaPix 1.31, exploitable via the albumID parameter to popup.php and view_album.php. The issue allows remote attackers to inject arbitrary web script or HTML. Documents confirm the affected component and vulnerable endpoints...

CVE-2006-2912

CVE-2006-2912 affects SelectaPix 1.31. Multiple SQL injection vulnerabilities exist in the web interface: parameters albumID (view_album.php, index.php), imageID (popup.php), and username/password (admin/member.php). Remote attackers could inject SQL commands to access or modify the database. Pro...

CVE-2006-2722

CVE-2006-2722 : The connected documents confirm a SQL injection vulnerability in SelectaPix 1.4, affecting the view_album.php component. The vulnerability allows remote attackers to execute arbitrary SQL commands via unknown vectors. The exact exploit path, affected versions beyond 1.4, and remed...

CVE-2006-2463

CVE-2006-2463 affects SelectaPix 1.31 and earlier. The vulnerability stems from view_album.php where an invalid or missing parameter causes an error message to reveal the installation path, exposing sensitive directory information. The available sources confirm the affected product/version and th...