PT-2006-5796 · Ktools.Net · Ktools.Net Photostore

Meto5757 · Published 2006-09-28 · Updated 2018-10-17 · CVE-2006-5057

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ktools.net PhotoStore (affected versions not specified)

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities are found in the gid parameter in details.php and the photogid parameter in view photog.php.

Recommendations For the vulnerability in details.php, consider restricting the input for the gid parameter to prevent arbitrary script injection until a fix is available. For the vulnerability in view photog.php, consider restricting the input for the photogid parameter to prevent arbitrary script injection until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-5057

Affected Products

Ktools.Net Photostore

References · 8

• 🔥 http://securityfocus.com/bid/20172 · Exploit
• 🔥 https://exploit-db.com/exploits/28663 · Exploit
• 🔥 https://exploit-db.com/exploits/28662 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5057 · Security Note
• http://securityreason.com/securityalert/1640 · Note
• http://securityfocus.com/archive/1/446909/100/0/threaded · Note
• http://secunia.com/advisories/22122 · Note
• http://vupen.com/english/advisories/2006/3781 · Note