Unrated severityNVD Advisory· Published Feb 26, 2007· Updated Jun 16, 2026
CVE-2007-1101
CVE-2007-1101
Description
Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) message ("comment") or (2) name field, or the (3) q parameter in a search action in index.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:photostand:photostand:1.2.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/24310nvdVendor Advisory
- www.vupen.com/english/advisories/2007/0752nvdVendor Advisory
- osvdb.org/33773nvd
- securityreason.com/securityalert/2296nvd
- www.securityfocus.com/archive/1/461150/100/0/threadednvd
- www.securityfocus.com/bid/22706nvd
- www.securityfocus.com/bid/22707nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/32701nvd
News mentions
0No linked articles in our index yet.