Vulnerabilities

TI-2004-02616 CVE-2004-2746 · GHSA-pgc8-5qmg-9q4q

SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows…

LOW 38

SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02963 Published 2007-11-08 No fix listed CWE-89

TI-2006-06680 CVE-2006-6937 · GHSA-358c-vm7f-838h

SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote…

LOW 35

SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01217 Published 2007-01-17 No fix listed

TI-2006-06679 CVE-2006-6936 · GHSA-rxmr-qmxr-88gc

Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote…

LOW 34

Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via (1) the catname parameter to displaypic.asp or (2) the search field.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01858 Published 2007-01-17 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows…

SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote…

Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote…