CVE-2008-6211

EPSS 1.5%

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the lang parameter to (1) admin.php, (2) index.php, (3) sess.php, (4) stats.php, (5) detail.php, (6) resize.php, and (7) show.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 7

exploitdbwww.exploit-db.com/exploits/31596no verificado exploitdbwww.exploit-db.com/exploits/31600no verificado exploitdbwww.exploit-db.com/exploits/31597no verificado exploitdbwww.exploit-db.com/exploits/31601no verificado exploitdbwww.exploit-db.com/exploits/31598no verificado exploitdbwww.exploit-db.com/exploits/31602no verificado exploitdbwww.exploit-db.com/exploits/31599no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://downloads.securityfocus.com/vulnerabilities/exploits/28587.html https://exchange.xforce.ibmcloud.com/vulnerabilities/41637 http://www.juniper.net/security/auto/vulnerabilities/vuln28587.html http://www.securityfocus.com/bid/28587