Strix
26.1K

CVE-2005-1023

UnknownEPSS 1.73%

Last modified

CVE-2005-1023 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module. NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000.. EPSS estimates a 1.73% chance of exploitation in the next 30 days.

Description

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module. NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000.

Metrics

EPSS Probability
1.73%

74.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
Francisco BurziPhp-Nuke6.0
Francisco BurziPhp-Nuke6.5
Francisco BurziPhp-Nuke6.5_beta1
Francisco BurziPhp-Nuke6.5_final
Francisco BurziPhp-Nuke6.5_rc1
Francisco BurziPhp-Nuke6.5_rc2
Francisco BurziPhp-Nuke6.5_rc3
Francisco BurziPhp-Nuke6.6
Francisco BurziPhp-Nuke6.7
Francisco BurziPhp-Nuke6.9
Francisco BurziPhp-Nuke7.0
Francisco BurziPhp-Nuke7.0_final
Francisco BurziPhp-Nuke7.1
Francisco BurziPhp-Nuke7.2
Francisco BurziPhp-Nuke7.3
Francisco BurziPhp-Nuke7.4
Francisco BurziPhp-Nuke7.5
Francisco BurziPhp-Nuke7.6

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2005-1023?
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module. NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000.
How severe is CVE-2005-1023?
Severity scoring for CVE-2005-1023 is pending analysis. The EPSS model estimates a 1.73% probability of exploitation in the next 30 days.
How do I fix CVE-2005-1023?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-1023?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST