CVE-2004-1871

MEDIUM 4.3CVE-2004-1871 · Published 29/03/2004 · updated 16/06/2026

In short

CVE-2004-1871 is a MEDIUM (CVSS 4.3) vulnerability affecting photopost php pro (photopost).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
photopost php pro photopost	`= 3.1= 3.2= 3.3= 4.0= 4.1= 4.6= 4.8.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields.

References

marc.info
secunia.com/advisories/11241 · Exploit
securitytracker.com/id · Vendor Advisory
gulftech.org/03282004.php
securityfocus.com/bid/9994 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/15643

More vulnerabilities in photopost php pro

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

photopost php pro

photopost

= 3.1= 3.2= 3.3= 4.0= 4.1= 4.6= 4.8.1

No fix yet

Description

More vulnerabilities in photopost php pro

See all →