← Database

CVE-2006-4421

MEDIUM CVSS: 4.3 Published: 2006-08-29 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote attackers to inject arbitrary web script or HTML via the D_REFRESH_URL parameter.

Affected Platforms

Yapig Yapig

Weakness Type

NVD-CWE-Other

References