Lucene search

K
cve[email protected]CVE-2007-1519
HistoryMar 20, 2007 - 8:19 p.m.

CVE-2007-1519

2007-03-2020:19:00
CWE-79
web.nvd.nist.gov
21
cve-2007-1519
cross-site scripting
xss vulnerability
php-nuke 8.0
nvd
web security

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.3%

Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948.

CPENameOperatorVersion
phpnuke:php-nukephpnuke php-nukele8.0

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.3%

Related for CVE-2007-1519