Security Advisory

CVE-2009-3911

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-11-09 17:00:00
Last updated 2024-08-07 06:45:51
Assigner mitre
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the sample parameter.