Lucene search
HistoryFeb 10, 2005 - 5:00 a.m.
CVE-2005-0274
cve-2005-0274
cross-site scripting
xss
showgallery.php
photopost
vulnerabilities
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.9%
Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) si, (3) page, or (4) ppuser parameters.
Affected configurations
Node
photopostphotopost_php_proRange≤4.85
| CPE | Name | Operator | Version |
|---|---|---|---|
| photopost:photopost_php_pro | photopost photopost php pro | le | 4.85 |
Related
openvas
openvas
PhotoPost PHP <= 4.8c Multiple XSS Vulnerabilities - Active Check
2011-03-03 00:00:00
PhotoPost showgallery.php SQL Injection
2005-11-03 00:00:00
cvelist
cvelist
CVE-2005-0274
2005-02-10 05:00:00
nvd
nvd
CVE-2005-0274
2005-01-03 05:00:00
exploitpack
exploitpack
PhotoPost 4.85 - Multiple Vulnerabilities
2015-01-03 00:00:00
exploitdb
exploitdb
PhotoPost < 4.85 - Multiple Vulnerabilities
2015-01-03 00:00:00
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.9%
Related for CVE-2005-0274