CVE-2005-1000: francisco_burzi php-nuke
Vulnerability summary
CVE-2005-1000 is a medium (CVSS 4.3) vulnerability in francisco_burzi php-nuke. EPSS estimates a 1.76% chance of exploitation in the next 30 days, higher than 77.8% of scored vulnerabilities. 5 public exploits are recorded.
Timeline
- 07-04-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) the ratenum parameter in the TopRated and MostPopular actions in the Web_Links module, (3) the ttitle parameter in the viewlinkdetails, viewlinkeditorial, viewlinkcomments, and ratelink actions in the Web_Links module, or (4) the username parameter in the Your_Account module.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.76%
Chance of exploitation in the next 30 days
Percentile
78%
Versus all other CVEs
30-day change
0.00 pp
From 1.76% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
5 foundExploit Reference (archives.neohapsis.com)
Maturity: unknown
PHP-Nuke 6.x/7.x Your_Account Module - 'Username' Cross-Site Scripting
Maturity: poc
PHP-Nuke 6.x/7.x Your_Account Module - Avatarcategory Cross-Site Scripting
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Francisco_burzi1 product
- php-nuke7.6
1 vendor · 1 product
References
3 links- archives.neohapsis.com/archives/bugtraq/2005-04/0037.htmlMailing ListX Refsource BUGTRAQExploitVendor Advisory