Unrated severityNVD Advisory· Published Jan 30, 2008· Updated Jun 16, 2026
CVE-2008-0497
CVE-2008-0497
Description
Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:nucleus_cms:nucleus_cms:3.31:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nucleus_cms:nucleus_cms:3.31:*:*:*:*:*:*:*
- (no CPE)range: =3.31
Patches
Vulnerability mechanics
References
8- sourceforge.net/project/shownotes.phpnvdPatch
- secunia.com/advisories/28680nvd
- securityreason.com/securityalert/3593nvd
- www.nucleuscms.org/item/3047nvd
- www.securityfocus.com/archive/1/487252/100/0/threadednvd
- www.securityfocus.com/archive/1/487255/100/0/threadednvd
- www.securityfocus.com/bid/27492nvd
- www.vupen.com/english/advisories/2008/0369nvd
News mentions
0No linked articles in our index yet.