CVE-2004-0265

Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules.

Published: Nov 23, 2004
Updated: Apr 13, 2023
CVE: CVE-2004-0265
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
francisco_burzi / php-nuke	6.5_beta1	6.5_beta1.x
francisco_burzi / php-nuke	6.5	6.5.x
francisco_burzi / php-nuke	7.0	7.0.x
francisco_burzi / php-nuke	7.0_final	7.0_final.x
francisco_burzi / php-nuke	6.5_rc2	6.5_rc2.x
francisco_burzi / php-nuke	6.5_rc3	6.5_rc3.x
francisco_burzi / php-nuke	6.0	6.0.x
francisco_burzi / php-nuke	6.5_final	6.5_final.x
francisco_burzi / php-nuke	6.7	6.7.x
francisco_burzi / php-nuke	6.6	6.6.x
francisco_burzi / php-nuke	6.9	6.9.x
francisco_burzi / php-nuke	7.1	7.1.x
francisco_burzi / php-nuke	6.5_rc1	6.5_rc1.x

Vulnerability Database

289,689

CVE-2004-0265