iGallery Plugin 1.0.0 Cross Site Scripting

Par
UnderNews
-
0
45

iGallery plugin version 1.0.0 suffers from a cross site scripting vulnerability when parsing user input to the ‘dir’ parameter via GET method in ‘/scripts/pthumb/demo/phpThumb.demo.random.php’. Attackers can exploit this weakness to execute arbitrary HTML and script code in a user’s browser session.

Source: iGallery Plugin 1.0.0 Cross Site Scripting

ARTICLES CONNEXESPLUS DE L'AUTEUR