source: http://www.securityfocus.com/bid/20172/info Photostore is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may allow an attacker to steal cookie-based authentication credentials and to launch other attacks. http://www.example.com/[path]/details.php?gid=[xss]
Related Exploits
Trying to match CVEs (1): CVE-2006-5057Trying to match OSVDBs (1): 29161
Other Possible E-DB Search Terms: Photostore
| Date | D | V | Title | Author |
|---|---|---|---|---|
| 2008-05-09 |  |
|
Ktools Photostore 3.5.1 - 'gid' Parameter SQL Injection | Mr.SQL |
| 2008-05-10 | |
|
Ktools Photostore 3.5.2 - Multiple SQL Injections | DNX |
| 2016-06-30 | |
|
Ktools Photostore 4.7.5 - Blind SQL Injection | Gal Goldsht... |
| 2006-09-25 | |
|
Photostore - view_photog.php photogid Parameter Cross-Site Scripting | meto5757 |
| 2016-07-04 | |
|
Ktools Photostore 4.7.5 - Multiple Vulnerabilities | Yakir Wizman |