CVE-2015-3921

LOW · 3.5 CVSS Gepubliceerd: 27-05-2015 CWE-79

Beschrijving NL

Cross-site scripting (XSS) kwetsbaarheid in contact.php in Coppermine Photo Gallery vóór 1.5.36 stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren via de referer parameter.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.

Vendors

Coppermine-gallery

Affected products

Coppermine Photo Gallery

References

forum.coppermine-gallery.net
packetstormsecurity.com
www.securityfocus.com
www.securitytracker.com