XSS in Nuked-Klan

CVE-2003-1371

Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.033 (87.3th percentile) — read the EPSS interpretation.

Affected products

  • Nuked-klan — versions 1.3_beta
  • N/a — versions n/a

Weakness classification (CWE)

References