CVE-2012-0995

CVE-2012-0995 affects Zenphoto 1.4.2 with multiple XSS vulnerabilities. The issue arises in ZENphoto where user-supplied input can be reflected in the browser via: (a) msg parameter to zp-core/admin.php, (b) PATH_INTO/PATH_INFO handling for unspecified URLs, (c) album parameter to zp-core/admin-e...