PT-2001-2608 · Php Nuke · Php-Nuke

Publicado 2001-12-31 · Atualizado 2008-09-05 · CVE-2001-1523

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP-Nuke (affected versions not specified)

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the topic parameter in the DMOZGateway module.

Recommendations For the affected versions, consider restricting access to the DMOZGateway module until a patch is available. As a temporary workaround, avoid using the topic parameter in the affected module to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-1523

Produtos afetados

Php-Nuke

Referências · 2

• 🔥 http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0853.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1523 · Nota de Segurança