Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2009-3367

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2009-3367
Last Modified 25 Sep 2009 12:00:00
Published 24 Sep 2009 12:30:02
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2009-3367

Summary

Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php, and the (3) show parameter to main.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Systems

Application

  • Plohni An Image Gallery 1.0


References

SECUNIA - 36680

OSVDB - 57945

OSVDB - 57944


Last Updated: 27 May 2016 10:51:14