Files
CVEs-PoC/2005/CVE-2005-0778.md
T
2025-09-29 21:09:30 +02:00

692 B

CVE-2005-0778

Description

PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.

POC

Reference

Github

No PoCs found on GitHub currently.