CVE-2006-0676

Published: Feb 13, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter.

Affected (18)

Products: Francisco Burzi: Php Nuke

Francisco Burzi

1 product

Php Nuke

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Francisco Burzi Php Nuke	Version 6.0
Francisco Burzi Php Nuke	Version 6.5
Francisco Burzi Php Nuke	Version 6.5_beta1
Francisco Burzi Php Nuke	Version 6.5_final
Francisco Burzi Php Nuke	Version 6.5_rc1
Francisco Burzi Php Nuke	Version 6.5_rc2
Francisco Burzi Php Nuke	Version 6.5_rc3
Francisco Burzi Php Nuke	Version 6.6
Francisco Burzi Php Nuke	Version 6.7
Francisco Burzi Php Nuke	Version 6.9
Francisco Burzi Php Nuke	Version 7.0
Francisco Burzi Php Nuke	Version 7.1
Francisco Burzi Php Nuke	Version 7.2
Francisco Burzi Php Nuke	Version 7.3
Francisco Burzi Php Nuke	Version 7.6
Francisco Burzi Php Nuke	Version 7.7
Francisco Burzi Php Nuke	Version 7.8
Francisco Burzi Php Nuke	Version 7.9