5
CVSSv2

CVE-2006-0185

Published: 12/01/2006 Updated: 08/03/2011
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote malicious users to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.

Vulnerable Product Search on Vulmon Subscribe to Product

php-nuke news module

php-nuke pool module

Exploits

source: wwwsecurityfocuscom/bid/16192/info The PHPNuke Pool and News Modules are prone to an HTML injection vulnerability This issue is due to a failure in the application modules to properly sanitize user-supplied input before using it in dynamically generated content Attacker-supplied HTML and script code would be executed in the con ...