CVE-2006-0676 | SynScan

Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2006-0676

Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter.

Published: Feb 13, 2006
Updated: Apr 13, 2023
CVE: CVE-2006-0676
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
francisco_burzi / php-nuke	6.5_beta1	6.5_beta1.x
francisco_burzi / php-nuke	6.5	6.5.x
francisco_burzi / php-nuke	7.0	7.0.x
francisco_burzi / php-nuke	7.2	7.2.x
francisco_burzi / php-nuke	7.8	7.8.x
francisco_burzi / php-nuke	6.5_rc2	6.5_rc2.x
francisco_burzi / php-nuke	7.3	7.3.x
francisco_burzi / php-nuke	6.5_rc3	6.5_rc3.x
francisco_burzi / php-nuke	7.6	7.6.x
francisco_burzi / php-nuke	7.9	7.9.x
francisco_burzi / php-nuke	6.0	6.0.x
francisco_burzi / php-nuke	7.7	7.7.x
francisco_burzi / php-nuke	6.5_final	6.5_final.x
francisco_burzi / php-nuke	6.7	6.7.x
francisco_burzi / php-nuke	6.6	6.6.x
francisco_burzi / php-nuke	6.9	6.9.x
francisco_burzi / php-nuke	7.1	7.1.x
francisco_burzi / php-nuke	6.5_rc1	6.5_rc1.x