Vulnerabilities

TI-2007-01070 CVE-2007-1102 · GHSA-wp6p-588g-vjc9

Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' (quote)…

LOW 26

Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' (quote) character in (1) a PHPSESSID cookie or (2) the id parameter in an article action in index.php, which reveal the path in various err…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01488 Published 2007-02-26 No fix listed

TI-2007-01069 CVE-2007-1101 · GHSA-rvj3-c6w8-wcmg

Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) message ("comment") or (2) name field, or the (3) q parameter in a search…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01983 Published 2007-02-26 No fix listed CWE-79

Vulnerabilities

Filters

Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' (quote)…

Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote…