Description
Cross-site scripting (XSS) vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the key_m parameter.
References
- myphoto-display-xss(27085) vdb-entry
- ADV-2006-2244 vdb-entry
- http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html
- 26280 vdb-entry
- 20554 third-party-advisory
- 18418 vdb-entry