PT-2001-2608 · Php Nuke · Php-Nuke

Published 2001-12-31 · Updated 2008-09-05 · CVE-2001-1523

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP-Nuke (affected versions not specified)

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the topic parameter in the DMOZGateway module.

Recommendations For the affected versions, consider restricting access to the DMOZGateway module until a patch is available. As a temporary workaround, avoid using the topic parameter in the affected module to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-1523

Affected Products

Php-Nuke

References · 2

• 🔥 http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0853.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1523 · Security Note