CVE-2006-1411

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.18%

Published

Mar 28, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters.

Affected Products (1)

xigla · absolute_image_gallery_xevulnerable

References (10)

http://pridels0.blogspot.com/2006/03/absolute-image-gallery-xe-20-xss-vuln.html

http://www.osvdb.org/24214

http://www.securityfocus.com/bid/18712

http://www.vupen.com/english/advisories/2006/1103

https://exchange.xforce.ibmcloud.com/vulnerabilities/25466

http://pridels0.blogspot.com/2006/03/absolute-image-gallery-xe-20-xss-vuln.html

http://www.osvdb.org/24214

http://www.securityfocus.com/bid/18712

http://www.vupen.com/english/advisories/2006/1103

https://exchange.xforce.ibmcloud.com/vulnerabilities/25466

KEV Catalog EPSS Scores Vendors All CVEs