Vulnerabilities > CVE-2004-1871 - Unspecified vulnerability in Photopost PHP PRO
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN photopost
exploit available
Summary
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 7 |
Exploit-Db
| description | PhotoPost < 4.6 - Multiple Vulnerabilities. CVE-2004-1870,CVE-2004-1871. Webapps exploit for PHP platform |
| id | EDB-ID:43808 |
| last seen | 2018-01-24 |
| modified | 2004-03-28 |
| published | 2004-03-28 |
| reporter | Exploit-DB |
| source | https://www.exploit-db.com/download/43808/ |
| title | PhotoPost < 4.6 - Multiple Vulnerabilities |
References
- http://marc.info/?l=bugtraq&m=108057790723123&w=2
- http://marc.info/?l=bugtraq&m=108057790723123&w=2
- http://secunia.com/advisories/11241
- http://secunia.com/advisories/11241
- http://securitytracker.com/id?1009571
- http://securitytracker.com/id?1009571
- http://www.gulftech.org/03282004.php
- http://www.gulftech.org/03282004.php
- http://www.securityfocus.com/bid/9994
- http://www.securityfocus.com/bid/9994
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15643
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15643