CVE-2007-1519
published 2007-03-20CVE-2007-1519: Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the…
PriorityP414medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.13%
62.2th percentile
Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| phpnuke | php-nuke | <= 8.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://phpfi.com/214668http://secunia.com/advisories/24629http://www.securityfocus.com/archive/1/462308/100/100/threadedhttp://www.ush.it/2007/03/09/php-nuke-wild-post-xss/http://www.wisec.it/ush/phpnukexss.htmlhttp://phpfi.com/214668http://secunia.com/advisories/24629http://www.securityfocus.com/archive/1/462308/100/100/threadedhttp://www.ush.it/2007/03/09/php-nuke-wild-post-xss/http://www.wisec.it/ush/phpnukexss.html
2007-03-20
Published