2 results (0.002 seconds)

CVSS: 6.1EPSS: 0%CPEs: 19EXPL: 2

16 Apr 2005 — Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php. • http://marc.info/?l=bugtraq&m=111343406309969&w=2 •

CVSS: 9.8EPSS: 0%CPEs: 19EXPL: 1

16 Apr 2005 — Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters. • http://marc.info/?l=bugtraq&m=111343406309969&w=2 •