CVE-2008-6495

Cross-site scripting XSS vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter...

CVE-2008-6495

Summary (CVE-2008-6495) : A cross-site scripting (CWE-79) vulnerability is present in Fritz Berger’s yet another PHP photo album next generation (yappa-ng) 2.3.2, affecting the index.php file via the album parameter. Documents from JVNDB-2021-000909 and JVN:55833077 describe an XSS that can lead ...