Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject arbitrary web script or HTML via the picfile parameter.
- http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup
No PoCs found on GitHub currently.