PT-2005-3620
CVE-2005-2737
·
Publicado
2005-08-29
·
Atualizado
2017-07-11
Descrição por
CVSS 2.0
4.3
MédiaMétricasAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
PhotoPost PHP Pro version 5.1
Description
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
Recommendations
For PhotoPost PHP Pro version 5.1, update to a version that fixes this issue to prevent exploitation.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾