4.3
CVE-2001-1524
- EPSS 2.01%
- Veröffentlicht 31.12.2001 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:56:26
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Francisco Burzi ≫ Php-nuke Version3.0
Francisco Burzi ≫ Php-nuke Version4.0
Francisco Burzi ≫ Php-nuke Version4.3
Francisco Burzi ≫ Php-nuke Version4.4
Francisco Burzi ≫ Php-nuke Version4.4.1a
Francisco Burzi ≫ Php-nuke Version5.0
Francisco Burzi ≫ Php-nuke Version5.0.1
Francisco Burzi ≫ Php-nuke Version5.1
Francisco Burzi ≫ Php-nuke Version5.2
Francisco Burzi ≫ Php-nuke Version5.2a
Francisco Burzi ≫ Php-nuke Version5.3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.01% | 0.783 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://online.securityfocus.com/archive/1/245691
http://online.securityfocus.com/archive/82/243545
http://www.iss.net/security_center/static/7654.php
http://www.securityfocus.com/bid/3609
http://online.securityfocus.com/archive/1/245875
http://online.securityfocus.com/archive/82/246603
http://prdownloads.sourceforge.net/phpnuke/PHP-Nuke-5.5.tar.gz