Unrated severityNVD Advisory· Published Jun 15, 2006· Updated Apr 16, 2026

CVE-2006-3032

Description

Multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 (trial), allow remote attackers to inject arbitrary web script or HTML via the (1) catname and (2) total parameters in (a) displaypic.asp, and the (3) catname parameter in (b) displaythumbs.asp.

Affected products

Pensacola Web Designs/Xtremeasp Photogallery2 versions
cpe:2.3:a:pensacola_web_designs:xtreme_asp_photo_gallery:1.05:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pensacola_web_designs:xtreme_asp_photo_gallery:1.05:*:*:*:*:*:*:*
- cpe:2.3:a:pensacola_web_designs:xtreme_asp_photo_gallery:2.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/20604nvdVendor Advisory
pridels0.blogspot.com/2006/06/xtreme-asp-photo-gallery-xss-vuln.htmlnvd
www.osvdb.org/26398nvd
www.osvdb.org/26399nvd
www.vupen.com/english/advisories/2006/2292nvd
exchange.xforce.ibmcloud.com/vulnerabilities/27033nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000