Vulnerability Details : CVE-2006-6088
Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) n or (2) d parameter in igallery.asp, or (3) an unspecified parameter related to search, possibly the Search Gallery field, or the myquery parameter, in search.asp. NOTE: some of these details are obtained from third party information.
Vulnerability category: Cross site scripting (XSS)
Exploit prediction scoring system (EPSS) score for CVE-2006-6088
Probability of exploitation activity in the next 30 days: 0.67%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 79 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-6088
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST |
References for CVE-2006-6088
-
http://www.vupen.com/english/advisories/2006/4584
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/30341
-
http://www.securityfocus.com/archive/1/451854/100/100/threaded
-
http://securityreason.com/securityalert/1912
-
http://aria-security.net/advisory/i-Gallery34.txt
Exploit;Vendor Advisory
-
http://www.securityfocus.com/bid/21122
Exploit
Products affected by CVE-2006-6088
- cpe:2.3:a:blue-collar_productions:i-gallery:3.4:*:*:*:*:*:*:*