CVE-2005-1000

PHP-Nuke 7.6 - Cross-Site Scripting via Multiple Parameters

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 4 public exploits for CVE-2005-1000. PoCs published by Maksymilian Arciemowicz, [email protected].

AI-analyzed exploit summary The provided text describes multiple cross-site scripting (XSS) vulnerabilities in the Web_Links Module of PHP-Nuke. It includes example URLs demonstrating how an attacker could inject arbitrary script code by manipulating user-supplied input parameters.

Description

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) the ratenum parameter in the TopRated and MostPopular actions in the Web_Links module, (3) the ttitle parameter in the viewlinkdetails, viewlinkeditorial, viewlinkcomments, and ratelink actions in the Web_Links module, or (4) the username parameter in the Your_Account module.

Exploits (4)

exploitdb WRITEUP VERIFIED
by Maksymilian Arciemowicz · textwebappsphp
https://www.exploit-db.com/exploits/25342

The provided text describes multiple cross-site scripting (XSS) vulnerabilities in the Web_Links Module of PHP-Nuke. It includes example URLs demonstrating how an attacker could inject arbitrary script code by manipulating user-supplied input parameters.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: PHP-Nuke (Web_Links Module)
No auth needed
Prerequisites: Access to the vulnerable PHP-Nuke instance · User interaction to trigger the XSS payload
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Maksymilian Arciemowicz · textwebappsphp
https://www.exploit-db.com/exploits/25343

The provided text describes a cross-site scripting (XSS) vulnerability in PHP-Nuke, where user-supplied input is not properly sanitized in the 'banners.php' script. An attacker can exploit this by crafting a malicious URL with arbitrary script code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: PHP-Nuke
No auth needed
Prerequisites: Access to the target PHP-Nuke instance · User interaction to click the malicious URL
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/25340

The exploit describes a cross-site scripting (XSS) vulnerability in PHP-Nuke's 'Your_Account' module, where the 'avatarcategory' parameter fails to sanitize user-supplied input, allowing remote attackers to execute arbitrary script code in the context of the victim's browser.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: PHP-Nuke 7.6 and previous versions
No auth needed
Prerequisites: Victim must follow a malicious URI link
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/25339

The exploit describes a cross-site scripting (XSS) vulnerability in PHP-Nuke's 'Your_Account' module due to improper sanitization of the 'username' parameter. It provides example URIs demonstrating how an attacker could inject malicious script code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: PHP-Nuke 7.6 and previous versions
No auth needed
Prerequisites: Access to a vulnerable PHP-Nuke instance · Victim interaction to follow a malicious link
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Vendor Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111263454308478&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/19952

Scores

EPSS 0.0176
EPSS Percentile 75.1%

Details

Status published
Products (1)
francisco_burzi/php-nuke 7.6
Published May 02, 2005
Tracked Since Feb 18, 2026