CVE-2006-1760

Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) Classic.view/thumbnail.php, (2) Classic.view/gallery.php, (3) Classic.view/detail.php, or (4) Orange.view/detail.php; or (5) the name parameter in Orange.view/slideshow.php.

• CWE-79

• http://marc.info/?l=full-disclosure&m=114472089719033&w=2
• http://secunia.com/advisories/19603Vendor Advisory
• http://www.osvdb.org/24491Exploit
• http://www.osvdb.org/24492Exploit
• http://www.osvdb.org/24493Exploit
• http://www.osvdb.org/24494Exploit
• http://www.securityfocus.com/bid/17449
• http://www.vupen.com/english/advisories/2006/1300
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25745
• http://marc.info/?l=full-disclosure&m=114472089719033&w=2
• http://secunia.com/advisories/19603Vendor Advisory
• http://www.osvdb.org/24491Exploit
• http://www.osvdb.org/24492Exploit
• http://www.osvdb.org/24493Exploit
• http://www.osvdb.org/24494Exploit
• http://www.securityfocus.com/bid/17449
• http://www.vupen.com/english/advisories/2006/1300
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25745

Published

Apr 13, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1754SQL injection vulnerability in index.php in SWSoft Confixx 3…
• CVE-2006-1755SQL injection vulnerability in admin.php in MD News 1 allows…
• CVE-2006-1756MD News 1 allows remote attackers to bypass authentication v…
• CVE-2006-1757Cross-site scripting (XSS) vulnerability in index.php in Veg…
• CVE-2006-1758SQL injection vulnerability in index.php in Vegadns 0.99 all…
• CVE-2006-1759Cross-site scripting (XSS) vulnerability in allgemein_transf…
• CVE-2006-1761Cross-site scripting vulnerability in index.php in blur6ex 0…
• CVE-2006-1762Directory traversal vulnerability in index.php in blur6ex 0.…
• CVE-2006-1763Multiple SQL injection vulnerabilities in index.php in blur6…
• CVE-2006-1764Hosting Controller 6.1 stores forum/db/forum.mdb under the w…
• CVE-2006-1765Cross-site scripting (XSS) vulnerability in index.php in JBo…
• CVE-2006-1766Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3…