XSS in Yabsoft Advanced Image Hosting Script
CVE-2009-4266
Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.014 (70.7th percentile) — read the EPSS interpretation.
Affected products
- Yabsoft Advanced_image_hosting_script — versions 2.2, 2.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)