CVE-2008-3786 Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject arbitrary web script or HTML via the qtitle parameter (aka "Gallery or event name"...
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject arbitrary web script or HTML via the qtitle parameter (aka "Gallery or event name" field) in a search action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| picturespro photo cart | = 3.9 | No fix listed |
References
- 20080822 Photo Cart 3.9 index.php "search" XSS mailing-list
- 31589 third-party-advisory vendor-advisory
- 30798 vdb-entry
- photocart-gallery-xss(44614) vdb-entry