4.3
CVSSv2

CVE-2011-4806

Published: 14/12/2011 Updated: 10/02/2012
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) var1 and (2) keyword parameters.

Vulnerable Product Search on Vulmon Subscribe to Product

phpalbum phpalbum

phpalbum phpalbum 0.4.1-14

phpalbum phpalbum 0.3.1

phpalbum phpalbum 0.2.1

phpalbum phpalbum 0.3.0

phpalbum phpalbum 0.2.4

phpalbum phpalbum 0.2.3

phpalbum phpalbum 0.2.2

phpalbum phpalbum 0.4.1.14

phpalbum phpalbum 0.4.1.15

phpalbum phpalbum 0.3.2

Exploits

---------------------------------------------------------------- PHP Photo Album <= (04116) Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- # Exploit Title: PHP Photo Album <= (04116) Multiple Disclosure Vulnerabilities # Google Dork: inurl:mainphp?cmd=imageview&var1= # Applicat ...