← Database

CVE-2009-4857

MEDIUM CVSS: 4.3 Published: 2010-05-11 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in login.php in PHP Photo Vote 1.3F allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected Platforms

Ecomstudio Php Photo Vote1.3F

Weakness Type

CWE-79

References