Vulnerability in Francisco_burzi Php-nuke
CVE-2005-4260
Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting (XSS) attacks by replacing the ">" in the tag with a "<", which bypasses the regular expressions that saniti…
EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.
Affected products
- Francisco_burzi Php-nuke — versions 7.0, 7.1, 7.2
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)