CVE-2011-1063

CVE-2011-1063 affects Cherry-Design Photopad 1.2.0. The vulnerability is due to input sanitation errors in files.php (parameters id and data[title]) and gallery.php (parameter id in view action), enabling remote XSS attacks. Exploitation could allow injection of arbitrary HTML/JavaScript in the v...