Description
Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter.
References
- 20050418 Vulnerability in Coppermine Photo Gallery 1.3.* mailing-list
- 13218 vdb-entry
- http://coppermine.sourceforge.net/board/index.php?topic=17134
- 15004 third-party-advisory