Klan · Nuked-Klan · CVE-2006-0506
**Name of the Vulnerable Software and Affected Versions**
Nuked-klaN version 1.7
**Description**
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `letter` parameter in the index.php file.
**Recommendations**
For Nuked-klaN version 1.7, consider restricting access to the index.php file until a fix is available, and avoid using the `letter` parameter to minimize the risk of exploitation.