CVE-2004-0265: XSS
Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0265?
CVE-2004-0265 has a medium severity level due to its potential to expose users to cross-site scripting attacks.
How do I fix CVE-2004-0265?
To fix CVE-2004-0265, upgrade to a secure version of PHP-Nuke that has patched this vulnerability.
Which versions of PHP-Nuke are affected by CVE-2004-0265?
CVE-2004-0265 affects PHP-Nuke versions from 6.0 to 7.1.0, including various beta and release candidates.
What is the impact of CVE-2004-0265 on PHP-Nuke users?
The impact of CVE-2004-0265 allows attackers to execute arbitrary scripts in the context of other users, potentially leading to data theft or session hijacking.
Can CVE-2004-0265 be exploited through user input?
Yes, CVE-2004-0265 can be exploited by manipulating the title or fname parameters in the News or Reviews modules.