Description
Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP-Members Membership Cross-Site Scripting (3.1.4.2)
Squid Integer Overflow or Wraparound Vulnerability (CVE-2020-11945)
Oracle Database Server CVE-2009-1965 Vulnerability (CVE-2009-1965)
phpMyAdmin Other Vulnerability (CVE-2001-0478)
WordPress Plugin Z-Vote 'zvote' Parameter SQL Injection (1.1)