CVE-2007-5012

Affected software: PhpWebGallery 1.7.0. Vulnerable component: picture.php. Issue: cross-site scripting (XSS) via the author parameter when Comments for all is enabled. Impact: remote attackers can inject arbitrary web script or HTML. Root cause details are not deeper than the description provided...