CVE-2008-0400 Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter to defau...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter to default.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| modern | = 1.3.2 | No fix listed |
| singapore | = 0.10.1 | No fix listed |
References
- 28573 third-party-advisory vendor-advisory
- trew.icenetx.net exploit
- 27382 exploit vdb-entry
- ADV-2008-0234 vdb-entry