← Database

CVE-2009-4934

MEDIUM CVSS: 4.3 Published: 2010-07-12 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter.

Affected Platforms

Esoftpro Online Photo Pro

Weakness Type

CWE-79

References