Vulnerabilities (CVE)

Filtered by vendor Php-nuke Subscribe
Filtered by product League Module
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-5039 2 Php-nuke, Phpnuke 2 League Module, Php-nuke 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via the tid parameter in a team action to modules.php.