CVE-2004-1871
Photopost Php Pro - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields.
Exploits (1)
References (6)
Scores
EPSS
0.1212
EPSS Percentile
93.8%
Details
Status
published
Products (7)
photopost/photopost_php_pro
3.1
photopost/photopost_php_pro
3.2
photopost/photopost_php_pro
3.3
photopost/photopost_php_pro
4.0
photopost/photopost_php_pro
4.1
photopost/photopost_php_pro
4.6
photopost/photopost_php_pro
4.8.1
Published
Mar 29, 2004
Tracked Since
Feb 18, 2026