Photoblog Security Vulnerabilities - February

cve

CVE-2006-0409

Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup.

5.7AI Score

0.028EPSS

2006-01-25 02:03 AM