Unscored CVE-2005-0434 EUVD-2005-0435GHSA-25pv-m7gv-3gwr

Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) t…

Published Feb 15, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownloadshowdays parameter in a NewDownloads operation or (2) the newlinkshowdays parameter in a NewLinks operation.

References

12561 vdb-entry
phpnuke-downloads-weblinks-xss(19346) vdb-entry
http://www.waraxe.us/advisory-40.html