CVE-2005-2737

CVE-2005-2737

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://cedri.cc/advisories/EXIF_XSS.txt http://marc.info/?l=bugtraq&m=112511025414488&w=2 http://secunia.com/advisories/16597/http://securitytracker.com/id?1014803 https://exchange.xforce.ibmcloud.com/vulnerabilities/22020 http://www.securityfocus.com/bid/14671