CVE-2005-0778: Photopost PHP Pro

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif.

Affected products

• Photopost Photopost PHP Pro: version 5.0_rc3 only

Published 2005-05-02. Last modified 2026-06-16.