CVE-2005-1027: XSS
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the YourAccount module, (2) avatarcategory parameter in the YourAccount module, or (3) lid parameter in the Downloads module.
Affected Software
Event History
Frequently Asked Questions
What is the impact of CVE-2005-1027 on PHP-Nuke versions 6.x through 7.6?
CVE-2005-1027 allows remote attackers to perform cross-site scripting (XSS) attacks by injecting arbitrary web scripts or HTML through specific parameters in the PHP-Nuke application.
Which PHP-Nuke versions are affected by CVE-2005-1027?
PHP-Nuke versions 6.0 through 7.6 are affected by CVE-2005-1027.
How can I mitigate the risks associated with CVE-2005-1027?
To mitigate CVE-2005-1027, users should upgrade to a patched version of PHP-Nuke that resolves the XSS vulnerabilities.
What parameters are involved in the CVE-2005-1027 vulnerability?
The parameters involved in CVE-2005-1027 include 'username' and 'avatarcategory' in the Your_Account module and 'lid' in the Downloads module.
Is CVE-2005-1027 a critical vulnerability?
CVE-2005-1027 is considered a significant security issue due to its potential for exploitation via XSS attacks.