CVEvulnerability
CVE-2015-2982
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified input to admin.php.
Affected configurations
• php kobo photo gallery cms free 1.0.0
• php kobo photo gallery cms free 1.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/en/jp/JVN69175956/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000113 Vendor Advisory
- http://www.php-factory.net/trivia/16.php Vendor Advisory
- http://jvn.jp/en/jp/JVN69175956/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000113 Vendor Advisory
- http://www.php-factory.net/trivia/16.php Vendor Advisory