Researchers
Back
2Mzrp
#30718
of 60,590
9.3
Total CVSS
Vulnerabilities
·
2
Medium
2
PT-2011-5112
2011-12-14
4.3
CVE-2011-4806
Phpalbum
Phpalbum
The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the `var1` and `keyword` parameters in the main.php file.
PT-2011-5113
2011-12-14
5.0
CVE-2011-4807
Phpalbum
Phpalbum
The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the main.php file. This is achieved by using a .. (dot dot) in the `var1` parameter.