CVE-2006-0923

Published: Feb 28, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the letter parameter in reviews.php and (2) the dcategory parameter in download.php.

Affected (3)

Products: Myphpnuke: Myphpnuke

Myphpnuke

1 product

Myphpnuke

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Myphpnuke Myphpnuke	Up to 1.8.8
Myphpnuke Myphpnuke	Version 1.8.8_7
Myphpnuke Myphpnuke	Version 1.8.8_8_rc2

References (16)

http://secunia.com/advisories/19052

Source: cve@mitre.org

http://securityreason.com/securityalert/491

Source: cve@mitre.org

http://www.myphpnuke.com/article.php?sid=1035&mode=thread&order=0

Source: cve@mitre.org

http://www.nukedx.com/?viewdoc=12

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/425983/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16815

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0750

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24887

Source: cve@mitre.org

http://secunia.com/advisories/19052