Unscored CVE-2006-4259 EUVD-2006-4247GHSA-c56f-phwq-v4hj

Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via…

Published Aug 21, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from a directory traversal vulnerability.

References

1421 third-party-advisory
19736 vdb-entry
ADV-2006-3400 vdb-entry
fotopholder-index-xss(28397) vdb-entry
28242 vdb-entry
20060815 otopholder 1.8 suffers from a local file inclusion,XSS and directory listing vuln mailing-list
1016702 vdb-entry
21648 third-party-advisory