CVE-2009-4857

2010-05-1020:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

Cross-site scripting (XSS) vulnerability in login.php in PHP Photo Vote 1.3F allows remote attackers to inject arbitrary web script or HTML via the page parameter.

References

osvdb.org/56828

packetstormsecurity.org/0908-exploits/ppv-xss.txt

secunia.com/advisories/36171

exchange.xforce.ibmcloud.com/vulnerabilities/52323