CVE-2005-0274

Published: Jan 3, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) si, (3) page, or (4) ppuser parameters.

Affected (1)

Products: Photopost: Photopost Php Pro

Photopost

1 product

Photopost Php Pro

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Photopost Photopost Php Pro	Up to 4.85

References (10)

http://marc.info/?l=bugtraq&m=110486165802196&w=2

Source: cve@mitre.org

http://secunia.com/advisories/13680/

Source: cve@mitre.org

ExploitVendor Advisory

http://www.gulftech.org/?node=research&article_id=00063-01032005

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/12156

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18744

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110486165802196&w=2