PT-2005-1806 · Unknown · Photopost Php

Igor Franchuk · Published 2005-03-20 · Updated 2017-07-11 · CVE-2005-0777

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PhotoPost PHP version 5.0 RC3

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerabilities are specifically found in the check tags function and the editbio field in the user profile.

Recommendations For PhotoPost PHP version 5.0 RC3, consider disabling the check tags function and restricting access to the editbio field in the user profile until a patch is available. Avoid using the editbio field in user profiles until the issue is resolved.

Fix

Related Identifiers

CVE-2005-0777

Affected Products

Photopost Php

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-0777 · Security Note
• http://securityfocus.com/bid/12779 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0777 · Note
• http://marc.info/?l=bugtraq&m=111065868402859&w=2 · Note
• http://secunia.com/advisories/14576 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19678 · Note