Vulnerabilities

TI-2008-04168 CVE-2008-4370 · GHSA-q89c-f58f-4x7j

Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to pics.php and the (2) a parameter to view.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2008-10-01 No fix listed CWE-79

TI-2008-04167 CVE-2008-4369 · GHSA-fw27-96f7-xwpc

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote…

LOW 35

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-01 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow…

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote…