Page 6 of 27 results (0.003 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 2

Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message. • http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0848.html http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0851.html •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 1

opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argument to the requesturl parameter. • http://archives.neohapsis.com/archives/bugtraq/2001-02/0214.html https://exchange.xforce.ibmcloud.com/vulnerabilities/6512 •