CVE-2009-2131

2009-06-19T18:00:00
ID CVE-2009-2131
Type cve
Reporter cve@mitre.org
Modified 2017-09-29T01:34:00

Description

Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted user_homepage parameter to member.php, and then posting a comment associated with a picture.