CVE-2004-0731: XSS
Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary script as other users via the input field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0731?
CVE-2004-0731 has a medium severity rating due to the potential for XSS attacks that could compromise user data.
How do I fix CVE-2004-0731?
To fix CVE-2004-0731, upgrade to a later version of PHP-Nuke that includes patches for this XSS vulnerability.
What are the implications of CVE-2004-0731?
The implications of CVE-2004-0731 include the risk of unauthorized script execution in users' browsers, leading to potential information theft or session hijacking.
Who is affected by CVE-2004-0731?
CVE-2004-0731 affects users and administrators of PHP-Nuke version 8.0_final, particularly those using the Search module.
Can CVE-2004-0731 be exploited remotely?
Yes, CVE-2004-0731 can be exploited remotely by attackers through the input field of the Search module.