CVE-2003-1371: XSS
Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove or disable handling of op=phpinfo in the Team, News, and Liens modules — specifically remove calls to phpinfo() or add input validation to reject 'phpinfo' as a value for the op parameter.
Nuked-Klan Partenaires Module — Team, News, Liens modules op parameter handling (phpinfo) = disabled - Compensating control
Block or filter HTTP requests containing the query parameter 'op=phpinfo' for the Team, News, and Liens module endpoints at the web server, WAF, or reverse proxy (e.g., drop or 403 requests with query string op=phpinfo).
- Operational
Search web server and application logs for requests containing 'op=phpinfo' targeting the Team, News, or Liens modules; investigate any hits for possible information disclosure and, if disclosure is confirmed, rotate any exposed credentials and remediate exposed secrets.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1371?
CVE-2003-1371 is considered a moderate severity vulnerability that can lead to information disclosure.
How do I fix CVE-2003-1371?
To mitigate CVE-2003-1371, it's recommended to update to a patched version of Nuked-Klan or disable the vulnerable modules.
What specific information can be disclosed by exploiting CVE-2003-1371?
Exploiting CVE-2003-1371 may allow attackers to access sensitive server information through the phpinfo function.
Which versions of Nuked-Klan are affected by CVE-2003-1371?
CVE-2003-1371 affects Nuked-Klan version 1.3b and possibly earlier versions.
Who is most at risk from CVE-2003-1371?
Organizations using vulnerable versions of Nuked-Klan for their web applications are most at risk from CVE-2003-1371.