{"api_version":"1","generated_at":"2026-07-24T22:55:24+00:00","cve":"CVE-2006-5057","urls":{"html":"https://cve.report/CVE-2006-5057","api":"https://cve.report/api/cve/CVE-2006-5057.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-5057","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-5057"},"summary":{"title":"CVE-2006-5057","description":"Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-09-28 00:07:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.1","severity":"","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2006/3781","name":"http://www.vupen.com/english/advisories/2006/3781","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22122","name":"http://secunia.com/advisories/22122","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PhotoStore Cross-Site Scripting Vulnerabilities - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20172","name":"http://www.securityfocus.com/bid/20172","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Photostore Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/446909/100/0/threaded","name":"http://www.securityfocus.com/archive/1/446909/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1640","name":"http://securityreason.com/securityalert/1640","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - PhotoStore Multiple Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-5057","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5057","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"5057","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ktools.net","cpe5":"photostore","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T19:32:23.331Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1640","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/1640"},{"name":"22122","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/22122"},{"name":"20172","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/20172"},{"name":"ADV-2006-3781","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/3781"},{"name":"20060923 PhotoStore Multiple Cross-Site Scripting Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/446909/100/0/threaded"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-09-23T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-17T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1640","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/1640"},{"name":"22122","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/22122"},{"name":"20172","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/20172"},{"name":"ADV-2006-3781","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/3781"},{"name":"20060923 PhotoStore Multiple Cross-Site Scripting Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/446909/100/0/threaded"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5057","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1640","refsource":"SREASON","url":"http://securityreason.com/securityalert/1640"},{"name":"22122","refsource":"SECUNIA","url":"http://secunia.com/advisories/22122"},{"name":"20172","refsource":"BID","url":"http://www.securityfocus.com/bid/20172"},{"name":"ADV-2006-3781","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3781"},{"name":"20060923 PhotoStore Multiple Cross-Site Scripting Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446909/100/0/threaded"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-5057","datePublished":"2006-09-28T00:00:00.000Z","dateReserved":"2006-09-27T00:00:00.000Z","dateUpdated":"2024-08-07T19:32:23.331Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-09-28 00:07:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ktools.net:photostore:*:*:*:*:*:*:*:*","matchCriteriaId":"471DB769-C620-47E7-A88E-F3A397B5FBB2"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"5057","Ordinal":"1","Title":"CVE-2006-5057","CVE":"CVE-2006-5057","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"5057","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php.","Type":"Description","Title":"CVE-2006-5057"},{"CveYear":"2006","CveId":"5057","Ordinal":"2","NoteData":"2006-09-27","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"5057","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}