CVE-2005-1000

The provided text describes multiple cross-site scripting (XSS) vulnerabilities in the Web_Links Module of PHP-Nuke. It includes example URLs demonstrating how an attacker could inject arbitrary script code by manipulating user-supplied input parameters.

The provided text describes a cross-site scripting (XSS) vulnerability in PHP-Nuke, where user-supplied input is not properly sanitized in the 'banners.php' script. An attacker can exploit this by crafting a malicious URL with arbitrary script code.

The exploit describes a cross-site scripting (XSS) vulnerability in PHP-Nuke's 'Your_Account' module, where the 'avatarcategory' parameter fails to sanitize user-supplied input, allowing remote attackers to execute arbitrary script code in the context of the victim's browser.

The exploit describes a cross-site scripting (XSS) vulnerability in PHP-Nuke's 'Your_Account' module due to improper sanitization of the 'username' parameter. It provides example URIs demonstrating how an attacker could inject malicious script code.