Description

Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.

Remediation

References

CVE-2010-4693

Related Vulnerabilities

WordPress Plugin Carts Guru PHP Object Injection (1.4.5)

Joomla! Core 3.x.x Multiple Vulnerabilities (3.2.0 - 3.6.5)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-1381)

WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7.2)

Vanilla Forums Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3812)

Severity

Medium

Classification

CVE-2010-4693 CWE-707

Tags

Missing Update Known Vulnerabilities