Cross-Site Scripting Vulnerabilities in Photokorn Gallery by Timo Feigl
CVE-2009-4980

Currently unrated

Key Information:

Vendor: Keil-software
Status: Photokorn Gallery
Vendor: CVE Published:; 25 August 2010

🔔 Create Keil-software Vulnerability Alert

What is CVE-2009-4980?

Multiple cross-site scripting (XSS) vulnerabilities exist in Photokorn Gallery versions 1.81 and earlier, enabling remote attackers to inject arbitrary web scripts or HTML. The vulnerabilities are exploited via the 'where[]' parameter in search.php and the 'qc' parameter in admin.php, posing a significant risk to web applications utilizing this gallery software.

References

http://www.securityfocus.com/bid/35966

vdb-entryx_refsource_BID

http://secunia.com/advisories/36150

third-party-advisoryx_refsource_SECUNIA

http://holisticinfosec.org/content/view/120/45/

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Aug 25, 2010

CVE-2009-4980 Data

JSON