PT-2003-2183 · Nuked Klan · Nuked-Klan

Published 2003-12-31 · Updated 2008-09-05 · CVE-2003-1238

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Nuked-Klan versions 1.3 beta and earlier

Description A cross-site scripting issue allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into the top of the Team, News, and Liens modules.

Recommendations For versions 1.3 beta and earlier, update to a version later than 1.3 beta to resolve the issue. As a temporary workaround, consider restricting access to the Team, News, and Liens modules until a patch is available. Avoid using these modules with untrusted input until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2003-1238

Affected Products

Nuked-Klan

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html · Exploit
• 🔥 http://securityfocus.com/bid/6916 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1238 · Security Note
• http://iss.net/security_center/static/11420.php · Note