CVE-2010-4693

Coppermine Photo Gallery 1.5.10 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient sanitization of user-supplied input. Exploitable via the h and t parameters to help.php, or via picfile_XXX parameters to searchnew.php, allowing attackers to inject...