EUVD-2007-4994

Malware in sbrugna...

CVE-2024-34749

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user...

CVE-2024-34749

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user...

CVE-2024-34749: Improper Neutralization of Input During Web Page Generation

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user...

CVE-2024-34749

Phormer , a PHP-based photo gallery manager application, is vulnerable to a cross-site scripting (XSS) vulnerability (CWE-79 ) in versions prior to 3.35 . A remote unauthenticated attacker can exploit this flaw to execute arbitrary scripts on a user's web browser. To remediate this issue, users s...

CVE-2024-34749

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user...

CVE-2024-34749

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user...

CVE-2024-34749

Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user...

PT-2024-26156

Name of the Vulnerable Software and Affected Versions Phormer versions prior to 3.35 Description The issue allows a remote unauthenticated attacker to execute an arbitrary script on the user's web browser. This is a cross-site scripting vulnerability. Recommendations For versions prior to 3.35,...

Phormer vulnerable to cross-site scripting

Overview Phormer contains a cross-site scripting vulnerability CWE-79. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be executed on t...

JVN#61054671: Phormer vulnerable to cross-site scripting

Phormer contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user. Solution Update the Software Update the software to the latest version according to the information provided by the developer. Phormer version 3.35 was released...

Phormer security vulnerability

Phormer is a PHP-based photo gallery manager application. A security vulnerability exists in Phormer that stems from a cross-site scripting vulnerability in Phormer...

Phormer PhotoGallery 3.3.1 Insecure Cookie

Exploit Code : Phormer PhotoGallery 3.3.1 Insecure Cookie Handling Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc Mail : [email protected] script : http://p.horm.org/er DorK:"This PhotoGallery is powered by Phormer" exploiT: go to admin page www.site.com/admin.php exploiT...

CVE-2007-5013

Multiple cross-site scripting XSS vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the 1 u, 2 p, 3 c, and 4 s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained sole...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the 1 u, 2 p, 3 c, and 4 s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained sole...

CVE-2007-5013

Multiple cross-site scripting XSS vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the 1 u, 2 p, 3 c, and 4 s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained sole...

CVE-2007-5013

CVE-2007-5013 corresponds to multiple XSS vulnerabilities in Phormer 3.31, specifically in index.php where the (1) u, (2) p, (3) c, and (4) s parameters (and other vectors) can be exploited to inject arbitrary script/HTML. The connected documents corroborate the presence of XSS via these input po...

CVE-2007-5013: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the 1 u, 2 p, 3 c, and 4 s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained sole...