CVE-2006-2796 - Cross-site scripting (XSS) vulnerability in gallery.php in Captivate 1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter, which is reflected in an error message

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in gallery.php in Captivate 1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter, which is reflected in an error message

Published Jun 3, 2006

6.8

MEDIUM

CVSS 2.0

EPSS 1.44%

Description

Cross-site scripting (XSS) vulnerability in gallery.php in Captivate 1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter, which is reflected in an error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://archives.neohapsis.com/archives/bugtraq/2006-05/0413.html
mailing-listx_refsource_BUGTRAQExploitVendor Advisory
http://securityreason.com/securityalert/1020
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/18072
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/26589
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2006-05/0413.html		mailing-listx_refsource_BUGTRAQExploitVendor Advisory
http://securityreason.com/securityalert/1020		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/18072		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/26589		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 3, 2006

Updated Aug 7, 2024

Reserved Jun 2, 2006

Link CVE-2006-2796

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-2796

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-2796