Unscored CVE-2005-2735 EUVD-2005-2736GHSA-pp59-gwrw-7wx5

Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via…

Published Aug 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

References

14669 vdb-entry
http://cedri.cc/advisories/EXIF_XSS.txt
1014801 vdb-entry
16595 third-party-advisory
photopost-exif-xss(22020) vdb-entry
20050826 Multiple PHP Images Galleries EXIF Metadata XSS Vulnerabilities mailing-list