CVE-2009-2380

Cross-site scripting XSS vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable...

CVE-2009-2380

CVE-2009-2380 affects 4images 1.7–1.7.7, where an XSS flaw exists in includes/functions.php via the url variable, enabling remote injection of arbitrary script/HTML. No remediation details are provided in the supplied documents.