vendor:
AZ Photo Album
by:
SecurityFocus
4,3
CVSS
MEDIUM
Cross-Site Scripting and Arbitrary File Upload
79, 264
CWE
Product Name: AZ Photo Album
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2012
The AZ Photo Album is prone to a cross-site-scripting and an arbitrary-file-upload vulnerabilities
Attackers can exploit these issues to steal cookie information, execute arbitrary client side script code in the context of browser, upload and execute arbitrary files in the context of the webserver, and launch other attacks.
Mitigation:
Input validation and sanitization should be used to prevent attackers from exploiting these issues.
