Unscored CVE-2002-1724 EUVD-2002-1703GHSA-cfhj-6c3m-mj6w

Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arbitrary script as ot…

Published Jun 21, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arbitrary script as other users via the pic parameter.

References

20020504 Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook mailing-list
4668 vdb-entry
http://www.ifrance.com/kitetoua/tuto/5holes4.txt
phpimageview-var-css(9000) vdb-entry