CVE-2008-1347 - CVE Reference - Advisories

CVE Reference: CVE-2008-1347

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1347

Description: Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the q parameter in an about action to the help system.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/41186 SAID Secunia Advisory: SA29372 MILW0RM http://www.milw0rm.com/exploits/5247 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/489583/100/0/threaded BID 28233

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Microsoft Windows DNS Spoofing Vulnerabilities

2.	Microsoft Access Snapshot Viewer ActiveX Control Vulnerability

3.	Microsoft Windows Explorer Saved Search Vulnerability

4.	Microsoft SQL Server and MSDE Multiple Vulnerabilities

5.	Joomla Unauthorized Access Vulnerabilities

6.	Microsoft Outlook Web Access Script Insertion Vulnerabilities

7.	Mozilla Firefox Multiple Vulnerabilities

8.	Symantec Brightmail AntiSpam Notifier Denial of Service

9.	Poppler "pageWidgets" Uninitialized Memory Access

10.	Neutrino Atomic Edition Security Bypass Vulnerability