$ cve CVE-2008-6211 JSON

CVE-2008-6211 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 1.5% (pctl 73)

Patch early

A public exploit exists.

Description

Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the lang parameter to (1) admin.php, (2) index.php, (3) sess.php, (4) stats.php, (5) detail.php, (6) resize.php, and (7) show.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS	1.48% — more likely to be exploited than 73% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2009-02-20
Last modified	2026-06-16

Affected (1)

Vendor	Product
mcgallerypro	mcgallery

Public exploits

Source	Title	Date
exploit-db	mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting	2008-04-03
exploit-db	mcGallery 1.1 - 'index.php?lang' Cross-Site Scripting	2008-04-03
exploit-db	mcGallery 1.1 - 'sess.php?lang' Cross-Site Scripting	2008-04-03
exploit-db	mcGallery 1.1 - 'stats.php?lang' Cross-Site Scripting	2008-04-03
exploit-db	mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting	2008-04-03
exploit-db	mcGallery 1.1 - 'resize.php?lang' Cross-Site Scripting	2008-04-03
exploit-db	mcGallery 1.1 - 'show.php?lang' Cross-Site Scripting	2008-04-03

References

→ the Explorer · watch your stack · NVD