Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arbitrary script as other users via the pic parameter.Referenceshttp://online.securityfocus.com/archive/82/270970http://www.securityfocus.com/bid/4668http://www.ifrance.com/kitetoua/tuto/5holes4.txthttps://exchange.xforce.ibmcloud.com/vulnerabilities/9000