CVE-2010-5005

CVE-2010-5005 describes a reflected XSS vulnerability in the Rayzz Photoz application, specifically in members/profileCommentsResponse.php where user input from the profileCommentTextArea parameter can be injected as script/HTML. The available connected documents consistently identify this as an ...

CVE-2010-5005: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in members/profileCommentsResponse.php in Rayzz Photoz allows remote attackers to inject arbitrary web script or HTML via the profileCommentTextArea parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

PT-2011-1940

Name of the Vulnerable Software and Affected Versions Rayzz Photoz affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the profileCommentTextArea parameter in the members/profileCommentsResponse.php file...