CVE-2006-0185 Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IM...
MediumCVSS 5.0
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php-nuke news module | All versions | No fix listed |
| php-nuke pool module | All versions | No fix listed |
References
- 18374 third-party-advisory vendor-advisory
- 20060107 Php-Nuke Pool and News Module IMG Tag Cross Site exploit mailing-list
- 16192 exploit vdb-entry
- ADV-2006-0125 vdb-entry