Unrated severityNVD Advisory· Published Apr 10, 2006· Updated Apr 16, 2026

CVE-2006-1675

Description

Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) num, and (3) search parameters to (a) category.php, and the (4) slideshow, (5) show_metadata, and (6) start parameters to (b) picture.php, a different vulnerability than CVE-2006-1674.

Affected products

Phpwebgallery/Phpwebgallery
cpe:2.3:a:phpwebgallery:phpwebgallery:1.4.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/17421nvdExploit
secunia.com/advisories/19610nvd
www.securityfocus.com/archive/1/430481/100/0/threadednvd
www.vupen.com/english/advisories/2006/1301nvd
exchange.xforce.ibmcloud.com/vulnerabilities/25733nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000