PHPNuke Multiple Script Code Filtering Vulnerabilities
BID:5953
Info
PHPNuke Multiple Script Code Filtering Vulnerabilities
| Bugtraq ID: | 5953 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 11 2002 12:00AM |
| Updated: | Oct 11 2002 12:00AM |
| Credit: | Discovery credited to Bruno Morisson. |
| Vulnerable: |
Francisco Burzi PHP-Nuke 6.0 |
| Not Vulnerable: | |
Discussion
PHPNuke Multiple Script Code Filtering Vulnerabilities
PHPNuke is a web based Portal system. Implemented in PHP, it is available for a range of systems, including Unix, Linux, and Microsoft Windows.
Multiple script code vulnerabilities have been discovered in various PHPNuke features. These problem could potentially result in the execution of arbitrary code within the context of the vulnerable website. Exploitation of this issue may allow remote attackers to steal user's cookie-based authentication credentials, or launch other attacks.
PHPNuke is a web based Portal system. Implemented in PHP, it is available for a range of systems, including Unix, Linux, and Microsoft Windows.
Multiple script code vulnerabilities have been discovered in various PHPNuke features. These problem could potentially result in the execution of arbitrary code within the context of the vulnerable website. Exploitation of this issue may allow remote attackers to steal user's cookie-based authentication credentials, or launch other attacks.
Solution / Fix
PHPNuke Multiple Script Code Filtering Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.