Cross site scripting

Cross-site scripting XSS vulnerability in display.php in Obsession-Design Image-Gallery ODIG 1.1 allows remote attackers to inject arbitrary web script or HTML via the folder parameter...

CVE-2010-0979

The CVE-2010-0979 issue affects Obsession-Design Image-Gallery (ODIG) 1.1, specifically in display.php where the folder parameter enables cross-site scripting (XSS). The vulnerability allows remote attackers to inject arbitrary web script or HTML. The root cause is an XSS flaw in the handling of ...