CVE-2005-1180: Francisco Burzi PHP-Nuke

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the forwarder parameter.

Affected products

• Francisco Burzi PHP-Nuke: up to and including 7.5; version 7.6 only

Published 2005-05-02. Last modified 2026-06-16.