PT-2003-2099 · John Beatty · John Beatty Easy Php Photo Album

Publicado 2003-05-11 · Atualizado 2008-09-05 · CVE-2003-1146

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions John Beatty Easy PHP Photo Album version 1.0

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the dir parameter in the API endpoint. This could potentially lead to unauthorized actions on the web application.

Recommendations For John Beatty Easy PHP Photo Album version 1.0, consider validating and sanitizing user input for the dir parameter to prevent injection of malicious scripts. As a temporary workaround, restrict access to the dir parameter to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2003-1146

Produtos afetados

John Beatty Easy Php Photo Album

Referências · 4

• 🔥 http://security.nnov.ru/docs5347.html · Exploit
• 🔥 http://securityfocus.com/bid/8977 · Exploit
• 🔥 https://exploit-db.com/exploits/23338 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1146 · Nota de Segurança