header-logo
Suggest Exploit
vendor:
PHPNuke
by:
Unknown
7.5
CVSS
HIGH
Content Filtering Bypass
Unknown
CWE
Product Name: PHPNuke
Affected Version From: PHPNuke 7.9 and prior versions
Affected Version To: PHPNuke 7.9
Patch Exists: NO
Related CWE: Unknown
CPE: Unknown
Metasploit:
Other Scripts:
Platforms Tested: Unknown
Unknown

Content Filtering Bypass Vulnerability in PHPNuke

This vulnerability in PHPNuke allows an attacker to bypass content filters and carry out cross-site scripting, HTML injection, and other attacks. By inserting malicious code into specific URIs, an attacker can exploit this vulnerability.

Mitigation:

It is recommended to update PHPNuke to version 7.9 or later to mitigate this vulnerability. Additionally, implementing a strong content filtering mechanism can help prevent such attacks.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/15855/info

PHPNuke is prone to a content filtering bypass vulnerability. This issue can allow an attacker to bypass content filters and potentially carry out cross-site scripting, HTML injection and other attacks.

PHPNuke 7.9 and prior versions are reported to be vulnerable. 

URI:
http://www.example.com/[DIR]/modules.php?name=Search
Insert:
<iframe src=http://www.example.com?phpnuke79 <

URI:
http://www.example.com/[DIR]//modules.php?name=Web_Links
Insert:
<iframe src=http://www.example.com?phpnuke79 <

Navigation

Suggest Exploit

Services By CQR