Vulnerabilities > CVE-2006-4480 - Cross-Site Scripting vulnerability in Nuked-Klan 1.7Sp4.3
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE network
nuked-klan
Summary
Incomplete blacklist vulnerability in the nk_CSS function in nuked.php in Nuked-Klan 1.7 SP4.3 allows remote attackers to bypass anti-XSS features and inject arbitrary web script or HTML via JavaScript in an attribute value that is not in the blacklist, as demonstrated using the STYLE attribute of a B element.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |