CVE-2005-0434: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownloadshowdays parameter in a NewDownloads operation or (2) the newlinkshowdays parameter in a NewLinks operation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0434?
CVE-2005-0434 is considered a moderate severity vulnerability due to the risk of cross-site scripting attacks.
How do I fix CVE-2005-0434?
To fix CVE-2005-0434, it is recommended to apply security patches provided by the PHP-Nuke developers for affected versions.
What versions of PHP-Nuke are affected by CVE-2005-0434?
CVE-2005-0434 affects PHP-Nuke versions 6.0 to 7.6.
What kind of attacks can CVE-2005-0434 facilitate?
CVE-2005-0434 can facilitate cross-site scripting attacks, allowing attackers to inject arbitrary HTML or scripts.
Who can exploit CVE-2005-0434?
CVE-2005-0434 can be exploited by remote attackers with the ability to manipulate the newdownloadshowdays and newlinkshowdays parameters.