Jetphoto · Jetphoto · CVE-2006-1760
**Name of the Vulnerable Software and Affected Versions**
JetPhoto (affected versions not specified)
**Description**
The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the `page` parameter in several API endpoints: "/Classic.view/thumbnail.php", "/Classic.view/gallery.php", "/Classic.view/detail.php", or "/Orange.view/detail.php"; or via the `name` parameter in the "/Orange.view/slideshow.php" endpoint.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.