Cross-site Scripting Vulnerability in Zenphoto Web Application
CVE-2012-2641

Currently unrated

Key Information:

Vendor

Zenphoto

Status
Zenphoto
Vendor
CVE Published:
5 July 2012

What is CVE-2012-2641?

An XSS vulnerability exists in Zenphoto prior to 1.4.3, enabling remote attackers to inject arbitrary web scripts or HTML. This flaw arises from improper interactions with an unspecified library, potentially compromising user data and site integrity.

References

http://www.zenphoto.org/news/zenphoto-1.4.3
x_refsource_CONFIRM
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000065
third-party-advisoryx_refsource_JVNDB
http://jvn.jp/en/jp/JVN59842447/index.html
third-party-advisoryx_refsource_JVN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.