CVE-2008-2698

The CVE-2008-2698 entry affects WEBalbum 2.0 and earlier, with concrete details in connected sources. The vulnerability is a cross-site scripting (XSS) flaw in photo_add-c.php (the “add comment” section). It allows remote attackers to inject arbitrary web script or HTML via one of three parameter...