CVE-2007-4212

Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "" in (1) the onerror attribute of an IMG element, (2) the onload attribute of an IFRAME element, or (3) redirect users to other sites via the META tag.

Link	Resource
http://www.securityfocus.com/bid/25171
http://securityreason.com/securityalert/2974
http://osvdb.org/42538
http://www.securityfocus.com/archive/1/475249/100/0/threaded

Configuration 1

cpe:2.3:a:phpnuke:php-nuke:7.3:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.4:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.1:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.9:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:8.0:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.5:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.2:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.7:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.8:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.0:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.6:*:*:*:*:*:*:*

---

Published : 2007-08-08 02:17

Updated : 2018-10-15 09:33

---

NVD link : CVE-2007-4212

Mitre link : CVE-2007-4212

Php-nuke

Phpnuke

NVD-CWE-Other