CVE-2011-4806

2022-10-0316:15:13

mitre

www.cve.org

cross-site scripting

remote attackers

injection

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) var1 and (2) keyword parameters.

References

www.exploit-db.com/exploits/18045