CVE-2006-0676

Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter.

Affected Software

Name	Vendor	Start Version	End Version
Php-nuke	Francisco_burzi	6.0 (including)	6.0 (including)
Php-nuke	Francisco_burzi	6.5 (including)	6.5 (including)
Php-nuke	Francisco_burzi	6.5_beta1 (including)	6.5_beta1 (including)
Php-nuke	Francisco_burzi	6.5_final (including)	6.5_final (including)
Php-nuke	Francisco_burzi	6.5_rc1 (including)	6.5_rc1 (including)
Php-nuke	Francisco_burzi	6.5_rc2 (including)	6.5_rc2 (including)
Php-nuke	Francisco_burzi	6.5_rc3 (including)	6.5_rc3 (including)
Php-nuke	Francisco_burzi	6.6 (including)	6.6 (including)
Php-nuke	Francisco_burzi	6.7 (including)	6.7 (including)
Php-nuke	Francisco_burzi	6.9 (including)	6.9 (including)
Php-nuke	Francisco_burzi	7.0 (including)	7.0 (including)
Php-nuke	Francisco_burzi	7.1 (including)	7.1 (including)
Php-nuke	Francisco_burzi	7.2 (including)	7.2 (including)
Php-nuke	Francisco_burzi	7.3 (including)	7.3 (including)
Php-nuke	Francisco_burzi	7.6 (including)	7.6 (including)
Php-nuke	Francisco_burzi	7.7 (including)	7.7 (including)
Php-nuke	Francisco_burzi	7.8 (including)	7.8 (including)
Php-nuke	Francisco_burzi	7.9 (including)	7.9 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-0676
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References