Advisories!: Splatt Forum 4.0 for PHP-Nuke 6.0 Multiple Vulnerabilities
Frame4 Security Advisory [FSA-2003:001]
Product : Splatt Forum 4.0 for
PHP-Nuke 6.0 Product/Vendor URI : http://www.splatt.it/ Type:
Vulnetablility / Exploit Impact : Medium Summary : Multiple Vulnerabilities
in Splatt Forum 4.0 Disovery Date : 26/03/2003 Public Release :
01/05/2003 Affected Versions(S): Splatt Forum 4.0 (as of discovery
date) Fixed Versions(S) : Splatt Forum 4.0 Fix 1 (not tested) Vendor Notified : No
We have discovered two vulnerabilities in the vanilla version of Splatt Forum
4.0 for PHP-Nuke 6.0; an XSS Vulnerability and an HTML/Code Injection Flaw.
The vulnerabilities and accompanying exploits were discovered and
executed upon only one web site, and verified by Webmaster
(webmaster@frame4.com).
