Vulnerabilities

TI-2008-03406 CVE-2008-3559 · GHSA-g2cv-3x8q-cx68

Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web script or HTML via the (1) filename parameter to search.asp and the (2) page parameter to order.asp.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01489 Published 2008-08-08 No fix listed CWE-79

TI-2008-01369 CVE-2008-1426 · GHSA-qcvx-p5cx-jqqg

SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to…

LOW 35

SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands via the albumid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-03-20 No fix listed CWE-89

TI-2006-02860 CVE-2006-2955 · GHSA-qqhq-hgjv-7963

Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) New Category (newcategory) or (2) apage parameter to (a) edt…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04313 Published 2006-06-12 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote…

SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to…

Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier…