CVE-2013-2087
Beschrijving NL
Meerdere cross-site scripting (XSS) kwetsbaarheden in Galerij 3 vóór 3.0.7 stellen aanvallers op afstand in staat om willekeurig webscript of HTML te injecteren via de (1) filmtitel naar modules/gallery/controllers/movies.php of (2) sleutelvariabele naar modules/gallery/views/error_admin.html.php.
Origineel (Engels) tonen
Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) movie title to modules/gallery/controllers/movies.php or (2) key variable to modules/gallery/views/error_admin.html.php.