Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote malicious users to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
francisco burzi php-nuke 6.5_beta1 |
||
francisco burzi php-nuke 6.5_final |
||
francisco burzi php-nuke 7.0_final |
||
francisco burzi php-nuke 7.1 |
||
francisco burzi php-nuke 6.5_rc3 |
||
francisco burzi php-nuke 6.6 |
||
francisco burzi php-nuke 6.7 |
||
francisco burzi php-nuke 6.0 |
||
francisco burzi php-nuke 6.5 |
||
francisco burzi php-nuke 6.9 |
||
francisco burzi php-nuke 7.0 |
||
francisco burzi php-nuke 6.5_rc1 |
||
francisco burzi php-nuke 6.5_rc2 |