CVE

Id
36328  
CVE No.
CVE-2008-6211  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the lang parameter to (1) admin.php, (2) index.php, (3) sess.php, (4) stats.php, (5) detail.php, (6) resize.php, and (7) show.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20090219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
397466 36328 CVE-2008-6211 MISC:http://downloads.securityfocus.com/vulnerabilities/exploits/28587.html  View
397467 36328 CVE-2008-6211 MISC:http://www.juniper.net/security/auto/vulnerabilities/vuln28587.html  View
397468 36328 CVE-2008-6211 BID:28587  View
397469 36328 CVE-2008-6211 URL:http://www.securityfocus.com/bid/28587  View
397470 36328 CVE-2008-6211 XF:mcgallery-lang-xss(41637)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41835 JVNDB-2009-002842 Venalsur Booking Centre Booking System の cadena_ofertas_ext.php におけるクロスサイトスクリプティングの脆弱性 Hotels Group の Venalsur Booking Centre Booking System の cadena_ofertas_ext.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-6215 36328 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002842.html  View