cve/2005/CVE-2005-0778.md
2024-06-18 02:51:15 +02:00

681 B

CVE-2005-0778

Description

PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.

POC

Reference

Github

No PoCs found on GitHub currently.