PHPWebGallery version 1.4.1 suffers from multiple cross site scripting flaws.
5a02974fc1c9ebfb5d0fc2e9c905508965ca1fef15df90a0893c3ee857057918Phpwebgallery-1.4.1 - Multiple Cross Site Scripting
Vendor : http://www.phpwebgallery.net/
Risk : Low
----------------------------------------------------------------
Register.php
-> login and mail_address fields are vulnerables to XSS attacks
Search.php
-> search_author,mode, start_year, end_year, date_type, are
vulnerables too.
----------------------------------------------------------------
Solutions : www.php.net/htmlentities
Regards,
Simon Bonnard
simon.itsecurity - at - gmail - dot - com
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed