CVE-2006-4563

CVE-2006-4563 details a cross-site scripting (XSS) flaw in the MyHeadlines before 4.3.2 module for PHP-Nuke. The vulnerability can be exploited remotely to inject arbitrary web script or HTML via the myh_op parameter to modules.php. Per the NVD entry, the CVSSv2 base score is 6.8 (MEDIUM) with ne...