CVE-2003-1372
Myphpnuke - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the (1) ratenum or (2) query parameters.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Tacettin Karadeniz · textwebappsphp
https://www.exploit-db.com/exploits/22268
References (5)
Scores
EPSS
0.0059
EPSS Percentile
69.0%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
myphpnuke/myphpnuke
Timeline
Published
Dec 31, 2003
Tracked Since
Feb 18, 2026