Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=108182759214035&w=2 | |
| http://secunia.com/advisories/11347 | Vendor Advisory |
| http://www.securityfocus.com/bid/10128 | Exploit Vendor Advisory |
| http://www.waraxe.us/index.php?modname=sa&id=16 | Exploit Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15842 | |
| http://marc.info/?l=bugtraq&m=108182759214035&w=2 | |
| http://secunia.com/advisories/11347 | Vendor Advisory |
| http://www.securityfocus.com/bid/10128 | Exploit Vendor Advisory |
| http://www.waraxe.us/index.php?modname=sa&id=16 | Exploit Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15842 |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://marc.info/?l=bugtraq&m=108182759214035&w=2 - | |
| References | () http://secunia.com/advisories/11347 - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/10128 - Exploit, Vendor Advisory | |
| References | () http://www.waraxe.us/index.php?modname=sa&id=16 - Exploit, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/15842 - |
Information
Published : 2004-04-12 04:00
Updated : 2024-11-20 23:52
NVD link : CVE-2004-1930
Mitre link : CVE-2004-1930
CVE.ORG link : CVE-2004-1930
JSON object : View
Products Affected
francisco_burzi
- php-nuke
CWE