RSS   Vulnerabilities for 'Photo album'   RSS

2005-05-02
 
CVE-2005-1115

 

 
Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.

 
 
CVE-2005-1114

 

 
Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters.

 


Copyright 2024, cxsecurity.com

 

Back to Top