CVE-2006-2187

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Zenphoto versions prior to 1.0.3 by injecting malicious script tags via the 'album' and 'image' parameters in the URL. The provided URLs show how arbitrary JavaScript can be executed in the context of the affected site.

The exploit demonstrates a reflected XSS vulnerability in Zenphoto versions prior to 1.0.3 by injecting a malicious script via the 'a' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site.