VULNERABILITY INTELLIGENCE
CVE-2006-6936
CVSS score6.8 MEDIUM
EPSS probability1.86%
CISA KEVNot currently listed
Published2007-01-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via (1) the catname parameter to displaypic.asp or (2) the search field. NOTE: vector 1 likely overlaps CVE-2006-3032.