PT-2003-2099 · John Beatty · John Beatty Easy Php Photo Album

Published 2003-05-11 · Updated 2008-09-05 · CVE-2003-1146

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions John Beatty Easy PHP Photo Album version 1.0

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the dir parameter in the API endpoint. This could potentially lead to unauthorized actions on the web application.

Recommendations For John Beatty Easy PHP Photo Album version 1.0, consider validating and sanitizing user input for the dir parameter to prevent injection of malicious scripts. As a temporary workaround, restrict access to the dir parameter to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-1146

Affected Products

John Beatty Easy Php Photo Album

References · 4

• 🔥 http://security.nnov.ru/docs5347.html · Exploit
• 🔥 http://securityfocus.com/bid/8977 · Exploit
• 🔥 https://exploit-db.com/exploits/23338 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1146 · Security Note