CVE-2011-1481: XSS
Published Jun 21, 2011
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sendername or (2) senderemail parameter in a Feedback action to modules.php.
Affected Software
26 affected components
Phpnuke Php-nuke<=8.0
Phpnuke Php-nuke=5.0
Phpnuke Php-nuke=5.0.1
Phpnuke Php-nuke=5.1
Phpnuke Php-nuke=5.2
Phpnuke Php-nuke=5.3
Phpnuke Php-nuke=5.3.1
Phpnuke Php-nuke=5.4
Phpnuke Php-nuke=5.5
Phpnuke Php-nuke=5.6
Phpnuke Php-nuke=6.0
Phpnuke Php-nuke=6.5
Phpnuke Php-nuke=6.6
Phpnuke Php-nuke=6.7
Phpnuke Php-nuke=6.8
Phpnuke Php-nuke=6.9
Phpnuke Php-nuke=7.0
Phpnuke Php-nuke=7.1
Phpnuke Php-nuke=7.2
Phpnuke Php-nuke=7.3
Phpnuke Php-nuke=7.4
Phpnuke Php-nuke=7.5
Phpnuke Php-nuke=7.6
Phpnuke Php-nuke=7.7
Phpnuke Php-nuke=7.8
Phpnuke Php-nuke=7.9
Event History
Jun 21, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1481?
CVE-2011-1481 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2011-1481?
To fix CVE-2011-1481, update PHP-Nuke to version 8.1 or higher, which addresses the XSS vulnerabilities.
3
What are the affected versions of PHP-Nuke for CVE-2011-1481?
CVE-2011-1481 affects PHP-Nuke version 8.0 and all earlier versions.
4
What type of attacks can be executed due to CVE-2011-1481?
CVE-2011-1481 allows remote attackers to execute arbitrary web scripts or HTML through injected input.
5
Is CVE-2011-1481 related to email parameters in PHP-Nuke?
Yes, CVE-2011-1481 specifically exploits the sender_name and sender_email parameters in the Feedback action.