CVE

Id
10446  
CVE No.
CVE-2004-2020  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers inject arbitrary HTML or web script into the (1) optionbox parameter in the News module, (2) date parameter in the Statistics module, (3) year, month, and month_1 parameters in the Stories_Archive module, (4) mode, order, and thold parameters in the Surveys module, or (5) a SQL statement to index.php, as processed by mainfile.php.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
72341 10446 CVE-2004-2020 BUGTRAQ:20040517 [waraxe-2004-SA#030 - Multiple vulnerabilities in PhpNuke 6.x - 7.3]  View
72342 10446 CVE-2004-2020 URL:http://marc.info/?l=bugtraq&m=108482957715299&w=2  View
72343 10446 CVE-2004-2020 MISC:http://www.waraxe.us/index.php?modname=sa&id=29  View
72344 10446 CVE-2004-2020 BID:10367  View
72345 10446 CVE-2004-2020 URL:http://www.securityfocus.com/bid/10367  View
72346 10446 CVE-2004-2020 OSVDB:6225  View
72347 10446 CVE-2004-2020 URL:http://www.osvdb.org/6225  View
72348 10446 CVE-2004-2020 OSVDB:6226  View
72349 10446 CVE-2004-2020 URL:http://www.osvdb.org/6226  View
72350 10446 CVE-2004-2020 SECUNIA:11625  View
72351 10446 CVE-2004-2020 URL:http://secunia.com/advisories/11625  View
72352 10446 CVE-2004-2020 XF:phpnuke-multi-xss(16172)  View

Related JVN