Unscored CVE-2005-2737 EUVD-2005-2738GHSA-873j-2796-479q

Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF d…

Published Aug 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

References

http://cedri.cc/advisories/EXIF_XSS.txt
1014803 vdb-entry
14671 vdb-entry
photopost-exif-xss(22020) vdb-entry
20050826 Multiple PHP Images Galleries EXIF Metadata XSS Vulnerabilities mailing-list
16597 third-party-advisory