Fullrevolution » Aspwebalbum : Security Vulnerabilities, CVEs, Published In 2009
Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp.
Max CVSS
6.8
EPSS Score
5.13%
Published
2009-08-19
Updated
2017-09-29
Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action.
Max CVSS
4.3
EPSS Score
0.23%
Published
2009-08-19
Updated
2017-09-29
2 vulnerabilities found