CVE-2005-4260: francisco_burzi php-nuke
Vulnerability summary
CVE-2005-4260 is a medium (CVSS 4.3) vulnerability in francisco_burzi php-nuke. EPSS estimates a 2.11% chance of exploitation in the next 30 days, higher than 81.6% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 15-12-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting (XSS) attacks by replacing the ">" in the tag with a "<", which bypasses the regular expressions that sanitize the data, but is automatically corrected by many web browsers. NOTE: it could be argued that this vulnerability is due to a design limitation of many web browsers; if so, then this should not be treated as a vulnerability in PHP-Nuke.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.11%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
0.00 pp
From 2.11% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
PHP-Nuke 7.x - Content Filtering Bypass
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Francisco_burzi1 product
- php-nuke7.0 | 7.1 | 7.2 | 7.3 | 7.6 | 7.7 | 7.8 | 7.9
1 vendor · 1 product