• info
• discussion
• exploit
• solution
• references

PHP-Nuke Your_Account Module Avatarcategory Cross-Site Scripting Vulnerability

The following example is available:

http://www.example.com/[nuke_dir]/modules.php?name=Your_Account&op=avatarlist&avatarcategory=[XSS]