2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in allphotos.html in fotolog allows remote attackers to inject arbitrary web script or HTML via the user parameter...
CVE-2007-2724
CVE-2007-2724 is a cross-site scripting vulnerability in the Fotolog all_photos.html page, exploitable via the user parameter to inject arbitrary script/HTML. The available documents confirm the affected component as all_photos.html and the vulnerability type as XSS, but do not provide exploit co...