Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

AvailScript Photo Album Script Multiple Input Validation Vulnerabilities

AvailScript Photo Album Script is prone to multiple input-validation vulnerabilities, including:

- An SQL-injection vulnerability
- Multiple cross-site scripting vulnerabilities

An attacker can exploit these issues to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.







 

Privacy Statement
Copyright 2009, SecurityFocus