CVE-2003-1547 — Cross-site Scripting in Burzi Php-nuke

CWE-79 — Cross-site Scripting5 documents5 sources
Severity
4.3MEDIUMNVD
EPSS
0.0%
top 92.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Francisco Burzi Php-nuke
Timeline
PublishedDec 31
Latest updateApr 29

Description

Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject arbitrary web script or HTML via the subject parameter.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDfrancisco_burzi/php-nuke5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-jrm9-wwr5-6jv2: Cross-site scripting (XSS) vulnerability in block-Forums↗2022-04-29
▶
CVEList
CVE-2003-1547: Cross-site scripting (XSS) vulnerability in block-Forums↗2008-03-06
▶

💥Exploits & PoCs

2
Exploit-DB
Microsoft Outlook Web Access for Exchange Server 2003 - 'redir.asp' Open Redirection↗2008-10-15
▶
Nuclei
Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection
▶