PHP Nuke Registration Form Fields Vulnerability
BID:3106
Info
PHP Nuke Registration Form Fields Vulnerability
| Bugtraq ID: | 3106 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 27 2001 12:00AM |
| Updated: | Jul 27 2001 12:00AM |
| Credit: | This vulnerability was discovered by dinopio and submitted to BugTraq on July 27th, 2001 by MegaHz <[email protected]>. |
| Vulnerable: |
Francisco Burzi PHP-Nuke 5.0 |
| Not Vulnerable: | |
Discussion
PHP Nuke Registration Form Fields Vulnerability
PHP-Nuke is a website creation/maintenance tool written in PHP3.
Fields in PHP-Nuke's user registration form do not filter out HTML tags. This may allow a malicious user to submit arbitrary HTML.
There is a possibility that scripting code will not be filtered when the registration form is previewed.
PHP-Nuke is a website creation/maintenance tool written in PHP3.
Fields in PHP-Nuke's user registration form do not filter out HTML tags. This may allow a malicious user to submit arbitrary HTML.
There is a possibility that scripting code will not be filtered when the registration form is previewed.
Exploit / POC
PHP Nuke Registration Form Fields Vulnerability
This vulnerability can be exploited with a web browser.
This vulnerability can be exploited with a web browser.
Solution / Fix
PHP Nuke Registration Form Fields Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.