Vulnerabilities > CVE-2005-3368 - HTML Injection vulnerability in Search Enhanced Search Enhanced 1.1/2.0

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
search-enhanced
exploit available
NVD
Published: 2005-10-30
Updated: 2017-07-11

Summary

Cross-site scripting (XSS) vulnerability in the Search_Enhanced module in PHP-Nuke 7.9 allows remote attackers to inject arbitrary web script or HTML via the query parameter.

Vulnerable Configurations

Part Description Count
Application
Search_Enhanced
2

Exploit-Db

descriptionSearch Enhanced Module 1.1/2.0 for PHP-Nuke HTML Injection Vulnerability. CVE-2005-3368. Webapps exploit for php platform
idEDB-ID:26428
last seen2016-02-03
modified2005-10-26
published2005-10-26
reporterbhfh01
sourcehttps://www.exploit-db.com/download/26428/
titleSearch Enhanced Module 1.1/2.0 for PHP-Nuke HTML Injection Vulnerability

References