Vulnerabilities (CVE)

Filtered by vendor Pensacola Web Designs Subscribe
Filtered by product Xtremeasp Photogallery
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-6937 1 Pensacola Web Designs 1 Xtremeasp Photogallery 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter.
CVE-2006-6936 1 Pensacola Web Designs 1 Xtremeasp Photogallery 2024-02-28 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via (1) the catname parameter to displaypic.asp or (2) the search field. NOTE: vector 1 likely overlaps CVE-2006-3032.
CVE-2004-2746 1 Pensacola Web Designs 1 Xtremeasp Photogallery 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.