CVE-2010-4693 in Coppermine-gallery Photo Galleryinfo

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.

Reservation

01/10/2011

Disclosure

01/10/2011

Entries

VulDB provides additional information and datapoints for this CVE:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!