CVE

Id
10357  
CVE No.
CVE-2004-1930  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments