Description
Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
References
- http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup
- 20080501 XSS in AstroCam mailing-list
- http://astrocam.svn.sourceforge.net/viewvc/astrocam/v2.x/pic.php?r1=125&r2=126
- http://www.wendzel.de/?sub=showpost&blogid=5&postid=56
- 30039 third-party-advisory
- 28998 vdb-entry
- astrocam-pic-xss(42122) vdb-entry
- http://astrocam.svn.sourceforge.net/viewvc/astrocam/CHANGELOG?view=markup
- 3852 third-party-advisory