CVE-2005-0434: Francisco Burzi PHP-Nuke

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownloadshowdays parameter in a NewDownloads operation or (2) the newlinkshowdays parameter in a NewLinks operation.

Affected products

• Francisco Burzi PHP-Nuke: version 6.0 only; version 6.5 only; version 6.5_beta1 only; version 6.5_final only; version 6.5_rc1 only; version 6.5_rc2 only; …

Published 2005-02-15. Last modified 2026-06-16.