Unscored CVE-2003-0318 EUVD-2003-0313GHSA-r43j-m5vr-73f8

Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary …

Published May 22, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter.

References

20030517 PHP-Nuke code injection in Yearly Stats at Statistics module mailing-list