CVE

Id
4324  
CVE No.
CVE-2001-1524  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php.  
Phase
Assigned (20050714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
20688 4324 CVE-2001-1524 BUGTRAQ:20011203 Phpnuke Cross site scripting vulnerability  View
20689 4324 CVE-2001-1524 URL:http://online.securityfocus.com/archive/82/243545  View
20690 4324 CVE-2001-1524 BUGTRAQ:20011215 PHPNuke holes  View
20691 4324 CVE-2001-1524 URL:http://online.securityfocus.com/archive/1/245691  View
20692 4324 CVE-2001-1524 BUGTRAQ:20011216 Phpnuke module.php vulnerability and php error_reporting issue  View
20693 4324 CVE-2001-1524 URL:http://online.securityfocus.com/archive/1/245875  View
20694 4324 CVE-2001-1524 VULN-DEV:20011220 1 last CSS hole in PHPNuke :)  View
20695 4324 CVE-2001-1524 URL:http://online.securityfocus.com/archive/82/246603  View
20696 4324 CVE-2001-1524 CONFIRM:http://prdownloads.sourceforge.net/phpnuke/PHP-Nuke-5.5.tar.gz  View
20697 4324 CVE-2001-1524 BID:3609  View
20698 4324 CVE-2001-1524 URL:http://www.securityfocus.com/bid/3609  View
20699 4324 CVE-2001-1524 XF:phpnuke-postnuke-css(7654)  View

Related JVN