CVE-2004-1871

Published: Mar 29, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields.

Affected (7)

Products: Photopost: Photopost Php Pro

Photopost

1 product

Photopost Php Pro

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Photopost Photopost Php Pro	Version 3.1
Photopost Photopost Php Pro	Version 3.2
Photopost Photopost Php Pro	Version 3.3
Photopost Photopost Php Pro	Version 4.0
Photopost Photopost Php Pro	Version 4.1
Photopost Photopost Php Pro	Version 4.6
Photopost Photopost Php Pro	Version 4.8.1