medium5.0Public exploit code
CVE-2006-0185
Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Nuke News Submission Story - Text Field Cross-Site Scripting2006-01-09 · webapps · php · Verified
Impact
Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php-Nuke | News Module | All versions |
| Php-Nuke | Pool Module | All versions |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18374
- http://www.securityfocus.com/archive/1/421322
- http://www.securityfocus.com/bid/16192
- http://www.vupen.com/english/advisories/2006/0125
- http://secunia.com/advisories/18374
- http://www.securityfocus.com/archive/1/421322
- http://www.securityfocus.com/bid/16192
- http://www.vupen.com/english/advisories/2006/0125