AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2005-4260

MEDIUM · CVSS 4.3 EPSS 2.11%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-12-15 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It may be remotely exploitable.

CVE
CVE-2005-4260
Severity
MEDIUM
CVSS
4.3
EPSS
2.11%

Original NVD Description

Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting (XSS) attacks by replacing the ">" in the tag with a "<", which bypasses the regular expressions that sanitize the data, but is automatically corrected by many web browsers. NOTE: it could be argued that this vulnerability is due to a design limitation of many web browsers; if so, then this should not be treated as a vulnerability in PHP-Nuke.