CVE-2007-4212: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "<" instead of a ">" in (1) the onerror attribute of an IMG element, (2) the onload attribute of an IFRAME element, or (3) redirect users to other sites via the META tag.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4212?
CVE-2007-4212 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2007-4212?
To fix CVE-2007-4212, upgrade to a version of PHP-Nuke that has patched the XSS vulnerabilities.
What versions of PHP-Nuke are affected by CVE-2007-4212?
CVE-2007-4212 affects PHP-Nuke versions 7.0 through 8.0.
What types of attacks can CVE-2007-4212 enable?
CVE-2007-4212 enables remote attackers to perform cross-site scripting attacks by injecting malicious scripts.
Is CVE-2007-4212 a common vulnerability?
CVE-2007-4212 is recognized as a common vulnerability within PHP-Nuke installations due to its multiple exploitation vectors.