3 matches found
PT-2024-27621 · Unknown · Fifu.App Featured Image From Url
Name of the Vulnerable Software and Affected Versions: fifu.App Featured Image from URL versions n/a through 4.8.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For...
CVE-2005-4022
CVE-2005-4022 is a Cross-site Scripting (XSS) vulnerability in Gallery 2.0 identified before 2.0.2. The flaw exists in the "Add Image From Web" feature where an attacker can inject arbitrary web script or HTML via Javascript inside an IMG tag. Impact described in public records is limited to web-...
CVE-2005-4022
Cross-site scripting XSS vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...