Skip to content
OpenAdvisories
Unscored CVE-2004-1840 EUVD-2004-1833GHSA-vxjx-8m3j-mpp3

Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to inject arbitrary web …

Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the (1) screen parameter to modules.php, (2) module_name parameter to title.php, (3) sortby parameter to modules.php, or (4) overview parameter to modules.php.

References