Unrestricted Logging Data in PhotoPost PHP 5.0 RC3 Allows Email Flooding

CVE-2005-0775 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator.

Learn more about our Web Application Penetration Testing UK.