CVE-2005-1027 | BDVDB-2026-9245 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (3) lid parameter in the Downloads module.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/7570
http://www.securityfocus.com/archive/1/321324
http://marc.info/?l=bugtraq&m=111272010303144&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/11994

Exploit#

No public exploit known

History#

Version 12005-04-09Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.