CVE-2008-0426

MEDIUM 4.3CVE-2008-0426 · Published 23/01/2008 · updated 16/06/2026

In short

CVE-2008-0426 is a MEDIUM (CVSS 4.3) vulnerability affecting pacercms (pacercms).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pacercms pacercms	`≤ 0.6.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PacerCMS before 0.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) headline, or (3) text field in a message.

References

pacercms.sourceforge.net/index.php/2008/01/21/pacercms-061-streamlines-code-base-addresses-security-issue
secunia.com/advisories/28605 · Vendor Advisory
securityfocus.com/archive/1/486796/100/0/threaded
securityfocus.com/bid/27386 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/39832

More vulnerabilities in pacercms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free