CVE-2005-0778 | BDVDB-2026-8916 Detail

Description#

PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/12779
https://exchange.xforce.ibmcloud.com/vulnerabilities/19679
http://marc.info/?l=bugtraq&m=111065868402859&w=2
http://secunia.com/advisories/14576

Exploit#

No public exploit known

History#

Version 12005-03-20Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.