CVE-2005-1180: HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoo...

Security readout for executives and security teams

CVE-2005-1180 is an old PHP-Nuke Surveys module issue where attacker-supplied line breaks in a URL parameter can alter HTTP responses. The documented business risk is spoofed web content or poisoned caches on exposed legacy PHP-Nuke sites. The source bundle does not provide CVSS scoring or vendor fix details. Exposure is most likely limited to legacy PHP-Nuke 7.6 deployments, and possibly earlier versions per the Bugtraq reference, with the Surveys module reachable over HTTP. The CVE bundle’s affected-product section is incomplete, so asset validation is necessary. Prioritize if any legacy PHP-Nuke site remains public-facing or cacheable through a proxy or CDN. If PHP-Nuke is not present, this CVE is not materially relevant. Unsupported legacy CMS exposure should be treated as a cleanup and decommissioning priority. Mitigation focus: Inventory public sites for PHP-Nuke and the Surveys module.; Check vendor or project guidance for fixed versions or recommended remediation.; Retire or isolate unsupported PHP-Nuke deployments where feasible..

Prepared

Jun 29, 2026, 22:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.