CVE-2005-0928

Description

Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) password, (3) ppuser, (4) sort, or (5) si parameters to showgallery.php, the (6) ppuser, (7) sort, or (8) si parameters to showmembers.php, or (9) the photo parameter to slideshow.php.

References

http://www.osvdb.org/15098

http://www.osvdb.org/15097

http://www.osvdb.org/15096

http://secunia.com/advisories/14742

http://marc.info/?l=bugtraq&m=111205342909640&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3