Back to search
CVE-2007-1101
Published: Feb 26, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) message ("comment") or (2) name field, or the (3) q parameter in a search action in index.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
22706
vdb-entry
x_refsource_BID
2296
third-party-advisory
x_refsource_SREASON
22707
vdb-entry
x_refsource_BID
photostand-index-xss(32701)
vdb-entry
x_refsource_XF
33773
vdb-entry
x_refsource_OSVDB
ADV-2007-0752
vdb-entry
x_refsource_VUPEN
20070224 Photostand_1.2.0 Multiple Cross Site Scripting
mailing-list
x_refsource_BUGTRAQ
24310
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now