EDB-21859

functional

PHP-Nuke 6.0 - News Message HTML Injection

view exploit source exploit_dbverifiedtype webappsauthor das@hush.compublished 2002-09-25catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2002-1803USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan