CVE-2005-2736

CVE-2005-2736 describes a cross-site scripting (XSS) vulnerability in the web gallery application YaPiG (versions ≤ 0.95). The flaw arises from processing EXIF data (e.g., the Camera Model Tag) without sufficient sanitization, allowing an attacker to inject arbitrary web script or HTML that can b...