CVE-2006-3948 – PHP-Nuke - 'INP modules.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2006-3948

Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en modules.php en PHP-Nuke INP permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro query. • https://www.exploit-db.com/exploits/28294 http://securityreason.com/securityalert/1311 http://www.aria-security.net/advisory/inp.txt http://www.securityfocus.com/archive/1/441490/100/0/threaded http://www.securityfocus.com/bid/19208 https://exchange.xforce.ibmcloud.com/vulnerabilities/28062 •