CVE

Id
10719  
CVE No.
CVE-2004-2293  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) eid parameter or (2) query parameter to the Encyclopedia module, (3) preview_review function in the Reviews module as demonstrated by the url, cover, rlanguage, and hits parameters, or (4) savecomment function in the Reviews module, as demonstrated using the uname parameter. NOTE: the Faq/categories and Encyclopedia/ltr issues are already covered by CVE-2005-1023.  
Phase
Assigned (20050804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
74705 10719 CVE-2004-2293 BUGTRAQ:20040611 [waraxe-2004-SA#032 - Multiple security flaws in PhpNuke 6.x - 7.3]  View
74706 10719 CVE-2004-2293 URL:http://www.securityfocus.com/archive/1/365865  View
74707 10719 CVE-2004-2293 BID:10524  View
74708 10719 CVE-2004-2293 URL:http://www.securityfocus.com/bid/10524  View
74709 10719 CVE-2004-2293 OSVDB:6997  View
74710 10719 CVE-2004-2293 URL:http://www.osvdb.org/6997  View
74711 10719 CVE-2004-2293 OSVDB:6998  View
74712 10719 CVE-2004-2293 URL:http://www.osvdb.org/6998  View
74713 10719 CVE-2004-2293 OSVDB:6999  View
74714 10719 CVE-2004-2293 URL:http://www.osvdb.org/6999  View
74715 10719 CVE-2004-2293 SECUNIA:11852  View
74716 10719 CVE-2004-2293 URL:http://secunia.com/advisories/11852  View
74717 10719 CVE-2004-2293 XF:phpnuke-faq-encyclopedia-xss(16406)  View

Related JVN