First published: Tue Mar 20 2007(Updated: )
Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PHP-Nuke | <=8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-1519 is classified as a critical vulnerability due to its potential for XSS exploitation.
To fix CVE-2007-1519, upgrade to a version of PHP-Nuke later than 8.0 that addresses this XSS vulnerability.
CVE-2007-1519 affects PHP-Nuke versions 8.0 and earlier.
CVE-2007-1519 enables remote attackers to perform cross-site scripting (XSS) attacks.
CVE-2007-1519 exists in the Downloads module of PHP-Nuke.