A vulnerability was found in Andy Mack 35mmslidegallery 6.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument imgdir leads to basic cross site scripting.
This vulnerability is uniquely identified as CVE-2006-3036. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2006-3036 | Andy Mack 35mmslidegallery 6.0 index.php imgdir cross site scripting (EDB-28020 / XFDB-27127)
A vulnerability was found in Andy Mack 35mmslidegallery 6.0. It has been classified as problematic. This affects an unknown part of the file index.php. The…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referenceexchange.xforce.ibmcloud.com
-
Web Referencewww.osvdb.org
-
Web Referencewww.securityfocus.com
-
Web Referencesecurityreason.com
-
Web Referencesecunia.com