CVE-2011-4806

EUVD-2011-4724
Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) var1 and (2) keyword parameters.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
phpalbumphpalbum
𝑥
≤ 0.4.1.16
phpalbumphpalbum
0.2.1
phpalbumphpalbum
0.2.2
phpalbumphpalbum
0.2.3
phpalbumphpalbum
0.2.4
phpalbumphpalbum
0.3.0
phpalbumphpalbum
0.3.1
phpalbumphpalbum
0.3.1:fix01
phpalbumphpalbum
0.3.1:fix02
phpalbumphpalbum
0.3.2
phpalbumphpalbum
0.4.1-14
phpalbumphpalbum
0.4.1-14:fix01
phpalbumphpalbum
0.4.1-14:fix02
phpalbumphpalbum
0.4.1-14:fix03
phpalbumphpalbum
0.4.1-14:fix05
phpalbumphpalbum
0.4.1-14:fix06
phpalbumphpalbum
0.4.1.14
phpalbumphpalbum
0.4.1.15
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.exploit-db.com/exploits/18045
http://www.exploit-db.com/exploits/18045