CVE:CVE-2006-1760
CNNVD:CNNVD-200604-181
JetPhoto中存在多个跨站脚本攻击漏洞。这使得远程攻击者可以借助于 (1) Classic.view/thumbnail.php、(2) Classic.view/gallery.php、(3) Classic.view/detail.php或(4) Orange.view/detail.php中的page参数或(5)Orange.view/slideshow.php中的name参数注入任意Web脚本或HTML。 or (5) the name parameter in Orange.view/slideshow.php.
solution:Upgrade jetphotosoft.com jetphoto to a higher version than 1.0,2.0,2.1,and avoid the version 1.0,2.0,2.1