2 matches found
CVE-2010-5005: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in members/profileCommentsResponse.php in Rayzz Photoz allows remote attackers to inject arbitrary web script or HTML via the profileCommentTextArea parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
4.3CVSS6AI score0.00845EPSS
SaveExploits0References2
PT-2011-1940
Name of the Vulnerable Software and Affected Versions Rayzz Photoz affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the profileCommentTextArea parameter in the members/profileCommentsResponse.php file...
4.3CVSS0.00845EPSS
SaveExploits0References3
20