CVE-2007-1519 Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the....
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpnuke php-nuke | <= 8.0 | No fix listed |
References
- phpfi.com exploit url-repurposed
- 24629 third-party-advisory
- 20070309 Php Nuke POST XSS on steroids mailing-list
- www.ush.it
- www.wisec.it exploit