CVE-2004-0737: Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote...

Security readout for executives and security teams

This is an old cross-site scripting issue in Php-Nuke's Search module. If a vulnerable site is still exposed, an attacker could make a user's browser run attacker-controlled script through crafted Search parameters. The business risk is mainly legacy exposure, user session abuse, and reputational impact. Exposure is most likely on legacy internet-facing Php-Nuke installations with the Search module enabled. The source bundle does not identify specific affected versions or package names beyond Php-Nuke Search module index.php. Treat this as a legacy-risk cleanup item unless vulnerable Php-Nuke is still internet-facing. If exposed, prioritize remediation because old XSS flaws are easy to rediscover and can affect users who visit crafted links. Mitigation focus: Inventory public sites for legacy Php-Nuke Search module exposure.; Check vendor or maintained-fork guidance for fixed versions.; Apply context-aware output encoding for affected Search parameters..

Prepared

Jun 30, 2026, 04:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.