Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
References
Link | Resource |
---|---|
http://cedri.cc/advisories/EXIF_XSS.txt | Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=112511025414488&w=2 | |
http://secunia.com/advisories/16595/ | Patch Vendor Advisory |
http://securitytracker.com/id?1014801 | |
http://www.securityfocus.com/bid/14669 | Patch |
https://exchange.xforce.ibmcloud.com/vulnerabilities/22020 |
Configurations
History
No history.
Information
Published : 2005-08-30 11:45
Updated : 2024-02-04 16:52
NVD link : CVE-2005-2735
Mitre link : CVE-2005-2735
CVE.ORG link : CVE-2005-2735
JSON object : View
Products Affected
phpgraphy
- phpgraphy
CWE