CVE-2006-3021: Blue-Collar Productions I-Gallery

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) n and (2) d parameters in (a) login.asp and the d parameter in (b) igallery.asp.

Affected products

• Blue-Collar Productions I-Gallery: up to and including 4.1; version 3.3 only; version 3.4 only

Published 2006-06-15. Last modified 2026-06-16.