Cross-Site Scripting Vulnerability in PHP-Nuke

vendor:

PHP-Nuke

by:

SecurityFocus

7.5

CVSS

HIGH

Cross-Site Scripting

CWE

Product Name: PHP-Nuke

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: YES

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2002

Cross-Site Scripting Vulnerability in PHP-Nuke

Multiple PHP scripts used by PHP-Nuke are vulnerable to cross-site scripting attacks due to insufficient sanitization of web requests. By constructing a malicious link which exploits one of these vulnerabilities, it may be possible to execute arbitrary code within the context of a website visited by an unsuspecting user. This may allow a remote attacker to steal cookie-based authentication credentials, which could be used at a later time to hijack a users web session.

Mitigation:

Sanitize web requests to prevent malicious code from being embedded in PHP script requests.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/6409/info

It has been discovered that multiple PHP scripts used by PHP-Nuke are vulnerable to cross-sitescripting attacks. Due to insufficient sanitization of web requests it is possible for script code to be embedded in PHP script requests.

By constructing a malicious link which exploits one of these vulnerabilities, it may be possible to execute arbitrary code within the context of a website visited by an unsuspecting user. This may allow a remote attacker to steal cookie-based authentication credentials, which could be used at a later time to hijack a users web session. 

http://[target]/modules/Forums/bb_smilies.php?name=[SCRIPT]
http://[target]/modules/Forums/bb_smilies.php?Default_Theme=[SCRIPT]
http://[target]/modules/Forums/bb_smilies.php?site_font=}--></style>[SCRIPT]
http://[target]/modules/Forums/bb_smilies.php?bgcolor1=">[SCRIPT]
or with :
$sitename
$table_width
$color1
$forumver

/modules/Forums/bbcode_ref.php with :
$name
$Default_Theme
$site_font
$sitename
$bgcolor2
$textcolor1
$bgcolor1
$forumver

/modules/Forums/editpost.php, /modules/Forums/newtopic.php,
/modules/Forums/reply.php, /modules/Forums/topicadmin.php,
/modules/Forums/viewforum.php with :
$name

/modules/Forums/searchbb.php with :
$name
$bgcolor3
$bgcolor1