CVE-2001-1524

N/A Unknown
Published: December 31, 2001 Modified: April 16, 2026
View on NVD

Description

Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://online.securityfocus.com/archive/1/245691
Source: cve@mitre.org
http://online.securityfocus.com/archive/1/245875
Source: cve@mitre.org
http://online.securityfocus.com/archive/82/243545
Source: cve@mitre.org
http://online.securityfocus.com/archive/82/246603
Source: cve@mitre.org
http://prdownloads.sourceforge.net/phpnuke/PHP-Nuke-5.5.tar.gz
Source: cve@mitre.org
Patch
http://www.iss.net/security_center/static/7654.php
Source: cve@mitre.org
http://www.securityfocus.com/bid/3609
Source: cve@mitre.org
http://online.securityfocus.com/archive/1/245691
Source: af854a3a-2127-422b-91ae-364da2661108
http://online.securityfocus.com/archive/1/245875
Source: af854a3a-2127-422b-91ae-364da2661108
http://online.securityfocus.com/archive/82/243545
Source: af854a3a-2127-422b-91ae-364da2661108
http://online.securityfocus.com/archive/82/246603
Source: af854a3a-2127-422b-91ae-364da2661108
http://prdownloads.sourceforge.net/phpnuke/PHP-Nuke-5.5.tar.gz
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.iss.net/security_center/static/7654.php
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/3609
Source: af854a3a-2127-422b-91ae-364da2661108

14 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.1%
29th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

francisco_burzi