Unrated severityNVD Advisory· Published Jan 30, 2008· Updated Apr 23, 2026
CVE-2008-0497
CVE-2008-0497
Description
Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF.
Affected products
1- cpe:2.3:a:nucleus_cms:nucleus_cms:3.31:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- sourceforge.net/project/shownotes.phpnvdPatch
- secunia.com/advisories/28680nvd
- securityreason.com/securityalert/3593nvd
- www.nucleuscms.org/item/3047nvd
- www.securityfocus.com/archive/1/487252/100/0/threadednvd
- www.securityfocus.com/archive/1/487255/100/0/threadednvd
- www.securityfocus.com/bid/27492nvd
- www.vupen.com/english/advisories/2008/0369nvd
News mentions
0No linked articles in our index yet.