Unscored CVE-2005-2736 EUVD-2005-2737GHSA-qh33-8hc5-5cp7

Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF …

Published Aug 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

References

14670 vdb-entry
http://cedri.cc/advisories/EXIF_XSS.txt
1014802 vdb-entry
16596 third-party-advisory
photopost-exif-xss(22020) vdb-entry
20050826 Multiple PHP Images Galleries EXIF Metadata XSS Vulnerabilities mailing-list