CVE-2008-0497

Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO…

published January 30, 2008

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01963 · 80.2th percentile
Published
2008-01-30T21:00Z
EPSS history
Timeline
  • 30 JAN 21:00Z
    Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO…
    cvelistv5