CVE-2009-4980: Keil-Software Photokorn Gallery

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) where[] parameter to search.php and (2) qc parameter to admin.php.

Affected products

• Keil-Software Photokorn Gallery: up to and including 1.81

Published 2010-08-25. Last modified 2026-06-16.