Vulnerabilities > CVE-2006-0676 - Cross-Site Scripting vulnerability in PHPNuke

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

francisco-burzi

exploit available

NVD

Published: 2006-02-13

Updated: 2018-10-19

Summary

Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter.

Vulnerable Configurations

Part	Description	Count
Application	Francisco_Burzi Francisco Burzi PHP Nuke 6.0 Francisco Burzi PHP Nuke 6.5 Francisco Burzi PHP Nuke 6.5_Beta1 Francisco Burzi PHP Nuke 6.5_Final Francisco Burzi PHP Nuke 6.5_Rc1 Francisco Burzi PHP Nuke 6.5_Rc2 Francisco Burzi PHP Nuke 6.5_Rc3 Francisco Burzi PHP Nuke 6.6 Francisco Burzi PHP Nuke 6.7 Francisco Burzi PHP Nuke 6.9 Francisco Burzi PHP Nuke 7.0 Francisco Burzi PHP Nuke 7.1 Francisco Burzi PHP Nuke 7.2 Francisco Burzi PHP Nuke 7.3 Francisco Burzi PHP Nuke 7.6 Francisco Burzi PHP Nuke 7.7 Francisco Burzi PHP Nuke 7.8 Francisco Burzi PHP Nuke 7.9	18

Exploit-Db

description	PHPNuke 6.x/7.x Header.PHP Pagetitle Parameter Cross-Site Scripting Vulnerability. CVE-2006-0676. Webapps exploit for php platform
id	EDB-ID:27208
last seen	2016-02-03
modified	2006-02-13
published	2006-02-13
reporter	Janek Vind
source	https://www.exploit-db.com/download/27208/
title	PHPNuke 6.x/7.x Header.PHP Pagetitle Parameter Cross-Site Scripting Vulnerability

Summary

Vulnerable Configurations

Exploit-Db

References