PHP-Nuke Modules.PHP Username URI Parameter Cross Site Scripting Vulnerability
BID:7570
Info
PHP-Nuke Modules.PHP Username URI Parameter Cross Site Scripting Vulnerability
| Bugtraq ID: | 7570 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 13 2003 12:00AM |
| Updated: | May 13 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to "Ferruh Mavituna" <[email protected]>. |
| Vulnerable: |
Francisco Burzi PHP-Nuke 6.5 RC3 Francisco Burzi PHP-Nuke 6.5 RC2 Francisco Burzi PHP-Nuke 6.5 RC1 Francisco Burzi PHP-Nuke 6.5 FINAL Francisco Burzi PHP-Nuke 6.5 |
| Not Vulnerable: | |
Solution / Fix
PHP-Nuke Modules.PHP Username URI Parameter Cross Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP-Nuke Modules.PHP Username URI Parameter Cross Site Scripting Vulnerability
References:
References:
- PHP-Nuke Product Page (Francisco Burzi)
- PHPNuke "Your Account" XSS Vulnerability ("Ferruh Mavituna"
)