Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://www.openwall.com/lists/oss-security/2012/10/11/10 | third party advisory mailing list |
http://www.openwall.com/lists/oss-security/2013/07/10/19 | third party advisory mailing list |