CVE-2005-2735

CVE-2005-2735

EPSS 2.0%

Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://cedri.cc/advisories/EXIF_XSS.txt http://marc.info/?l=bugtraq&m=112511025414488&w=2 http://secunia.com/advisories/16595/http://securitytracker.com/id?1014801 https://exchange.xforce.ibmcloud.com/vulnerabilities/22020 http://www.securityfocus.com/bid/14669