Unscored CVE-2005-4061 EUVD-2005-4056GHSA-9h76-33f7-m953

Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML…

Published Dec 7, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML via the search parameters.

References

http://pridels0.blogspot.com/2005/12/xcphotoalbum-v1x-xss-vuln.html
ADV-2005-2759 vdb-entry
17904 third-party-advisory
15739 vdb-entry
21477 vdb-entry