CVE-2006-1846

Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via…

published April 19, 2006

CVSS
—
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via the ublock parameter, which is saved in the user's personal menu. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, it is unclear whether this issue is a vulnerability, since it is related to the user's personal menu, which presumably is not modifiable by others.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01177 · 67.4th percentile
Published
2006-04-19T16:00Z
EPSS history
Timeline
  • 19 APR 16:00Z
    Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via…
    cvelistv5