CVE-2007-1469

CVE-2007-1469 describes an SQL injection in the gallery.asp component of Absolute Image Gallery 2.0. The vulnerability is triggered via the categoryid parameter in a viewimage action, allowing remote attackers to execute arbitrary SQL commands. The entry is supported by NVD and CVE records, which...

CVE-2006-1411

The CVE-2006-1411 issue affects Absolute Image Gallery XE 2.0 and earlier, where cross-site scripting (XSS) is possible via the shownew parameter in gallery.asp and through unspecified search module parameters. The underlying vulnerability is input handling that allows arbitrary web script/HTML t...

CVE-2008-2765

The CVE-2008-2765 entry concerns a SQL injection in the gallery.asp component of Xigla Absolute Image Gallery XE. The vulnerability is triggered by the categoryid parameter in a viewimage action, enabling remote attackers to execute arbitrary SQL commands. This document set confirms the affected ...

CVE-2005-4295

The CVE-2005-4295 entry describes a Cross-site scripting (XSS) vulnerability in the product Absolute Image Gallery XE 2.x, exploitable via the text parameter to inject arbitrary web script or HTML. Connected records confirm the affected component and root cause as an input vector (text parameter)...

CVE-2008-2766

The CVE-2008-2766 entry concerns Xigla Absolute Image Gallery XE, with a cross-site scripting (XSS) vulnerability affecting the admin/search.asp and gallery.asp endpoints. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The provided documents iden...