CVE Vulnerabilities

CVE-2004-1999

Published: May 05, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the (1) ttitle or (2) sid parameters to modules.php.

Affected Software

Name Vendor Start Version End Version
Php-nuke Francisco_burzi 6.0 (including) 6.0 (including)
Php-nuke Francisco_burzi 6.5 (including) 6.5 (including)
Php-nuke Francisco_burzi 6.6 (including) 6.6 (including)
Php-nuke Francisco_burzi 6.7 (including) 6.7 (including)
Php-nuke Francisco_burzi 6.8 (including) 6.8 (including)
Php-nuke Francisco_burzi 6.9 (including) 6.9 (including)
Php-nuke Francisco_burzi 7.0 (including) 7.0 (including)
Php-nuke Francisco_burzi 7.1 (including) 7.1 (including)
Php-nuke Francisco_burzi 7.2 (including) 7.2 (including)

References