vendor:
PHP Image Database
by:
larrycompress
8,8
CVSS
HIGH
Reflected XSS, Stored XSS, CSRF
79, 79, 352
CWE
Product Name: PHP Image Database
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: PHP
2016
PHP Image Database – Multiple Vulnerabilities
Multiple vulnerabilities exist in PHP Image Database, including Reflected XSS, Stored XSS, and CSRF. Reflected XSS can be exploited by sending a maliciously crafted URL to a victim, which will execute arbitrary JavaScript code when the URL is visited. Stored XSS can be exploited by sending a maliciously crafted URL to a victim, which will execute arbitrary JavaScript code when the URL is visited. CSRF can be exploited by sending a maliciously crafted URL to a victim, which will execute arbitrary JavaScript code when the URL is visited.
Mitigation:
Input validation should be used to prevent malicious code from being executed. Access control should be used to prevent unauthorized access to the application. Cross-site request forgery should be prevented by using a token-based approach.
