{
    "id": "CVE-2006-3036",
    "published": "2006-06-15 10:02:00",
    "last_modified": "2026-06-16 22:26:16",
    "cvss_score": "5.8",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
    "cwe": null,
    "description": "Multiple cross-site scripting (XSS) vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) imgdir parameter in (a) index.php, and the (2) w, (3) h, and (4) t parameters in (b) popup.php.",
    "epss_score": "0.04348",
    "epss_percentile": "0.90932",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-03 18:17:05",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "andy_mack",
            "product": "35mmslidegallery"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "28020",
            "title": "Andy Mack 35mm Slide Gallery 6.0 - 'index.php?imgdir' Cross-Site Scripting",
            "date": "2006-06-13",
            "url": "https://www.exploit-db.com/exploits/28020"
        },
        {
            "source": "exploit-db",
            "ref_id": "28021",
            "title": "Andy Mack 35mm Slide Gallery 6.0 - 'popup.php' Multiple Cross-Site Scripting Vulnerabilities",
            "date": "2006-06-13",
            "url": "https://www.exploit-db.com/exploits/28021"
        }
    ],
    "refs_list": [
        "http://secunia.com/advisories/20652",
        "http://securityreason.com/securityalert/1100",
        "http://www.osvdb.org/26507",
        "http://www.osvdb.org/26508",
        "http://www.securityfocus.com/archive/1/436959/100/0/threaded",
        "http://www.securityfocus.com/bid/18414",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/27127",
        "http://secunia.com/advisories/20652",
        "http://securityreason.com/securityalert/1100",
        "http://www.osvdb.org/26507",
        "http://www.osvdb.org/26508",
        "http://www.securityfocus.com/archive/1/436959/100/0/threaded",
        "http://www.securityfocus.com/bid/18414",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/27127"
    ]
}