CVEvulnerability
CVE-2008-0400
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-01-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter to default.php.
Affected configurations
• modern modern 1.3.2
• singapore singapore 0.10.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/28573 Vendor Advisory
- http://trew.icenetx.net/toolz/advisory-singapore-modern-template.txt Exploit
- http://www.securityfocus.com/bid/27382 Exploit
- http://www.vupen.com/english/advisories/2008/0234 www.vupen.com
- http://secunia.com/advisories/28573 Vendor Advisory
- http://trew.icenetx.net/toolz/advisory-singapore-modern-template.txt Exploit
- http://www.securityfocus.com/bid/27382 Exploit
- http://www.vupen.com/english/advisories/2008/0234 www.vupen.com