NVD

Id
72670  
Name
CVE-2004-2293  
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) eid parameter or (2) query parameter to the Encyclopedia module, (3) preview_review function in the Reviews module as demonstrated by the url, cover, rlanguage, and hits parameters, or (4) savecomment function in the Reviews module, as demonstrated using the uname parameter. NOTE: the Faq/categories and Encyclopedia/ltr issues are already covered by CVE-2005-1023.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-2293  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
374652 72670 CVE-2004-2293 20040611 [waraxe-2004-SA#032 - Multiple security flaws in PhpNuke 6.x - 7.3]  View
374653 72670 CVE-2004-2293 10524  View
374654 72670 CVE-2004-2293 phpnuke-faq-encyclopedia-xss(16406)  View

Related JVN