CVE-2011-1481

Published: Jun 21, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sender_name or (2) sender_email parameter in a Feedback action to modules.php.

Affected (26)

Products: Phpnuke: Php Nuke

Phpnuke

1 product

Php Nuke

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Phpnuke Php Nuke	Up to 8.0
Phpnuke Php Nuke	Version 5.0.1
Phpnuke Php Nuke	Version 5.0
Phpnuke Php Nuke	Version 5.1
Phpnuke Php Nuke	Version 5.2
Phpnuke Php Nuke	Version 5.3.1
Phpnuke Php Nuke	Version 5.3
Phpnuke Php Nuke	Version 5.4
Phpnuke Php Nuke	Version 5.5
Phpnuke Php Nuke	Version 5.6
Phpnuke Php Nuke	Version 6.0
Phpnuke Php Nuke	Version 6.5
Phpnuke Php Nuke	Version 6.6
Phpnuke Php Nuke	Version 6.7
Phpnuke Php Nuke	Version 6.8
Phpnuke Php Nuke	Version 6.9
Phpnuke Php Nuke	Version 7.0
Phpnuke Php Nuke	Version 7.1
Phpnuke Php Nuke	Version 7.2
Phpnuke Php Nuke	Version 7.3
Phpnuke Php Nuke	Version 7.4
Phpnuke Php Nuke	Version 7.5
Phpnuke Php Nuke	Version 7.6
Phpnuke Php Nuke	Version 7.7
Phpnuke Php Nuke	Version 7.8
Phpnuke Php Nuke	Version 7.9