CVE-2005-3436

Published: Nov 2, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the (1) Search module, (2) certain edit fields in Guestbook, (3) the title in the Forum module, and (4) Textbox.

Affected (1)

Products: Nuked Klan: Nuked Klan

Nuked Klan

1 product

Nuked Klan

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nuked Klan Nuked Klan	Version 1.7

References (12)

http://marc.info/?l=bugtraq&m=112991421210577&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17304/

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/104

Source: cve@mitre.org

http://www.securityfocus.com/bid/15166

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2189

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22873

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112991421210577&w=2