CVE-2008-4370

CVE-2008-4370 describes multiple cross-site scripting (XSS) vulnerabilities in the Availscript Photo Album. According to the provided documents, an attacker can inject arbitrary web script or HTML through the (1) sid parameter to pics.php and (2) the a parameter to view.php. The affected product ...