CVE-2010-4907

Mode C: The CVE-2010-4907 entry describes a cross-site scripting (XSS) vulnerability in Zenphoto 1.3, affecting zp-core/admin.php where an attacker can inject arbitrary script via the user parameter. The vulnerability is noted to be related to the from parameter, which is already covered by CVE-2...

CVE-2010-4907

creationtimestamp| type| source ---|---|--- 2010-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34611...