[原文]Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter.
It has been reported that 4nAlbum is prone to multiple vulnerabilities. These issues are primarily due to a failure of the module to validate user input.
There is an information disclosure issue with the 'displaycategory.php' script.
There is a remote file inclusion vulnerability in the 'displaycategory.php' script.
A cross-site scripting vulnerability in the 'nmimage.php' script has also been reported.
Finally an SQL injection vulnerability has been reported. This issue may be leveraged through the 'modules.php' script of phpNuke while requesting the 'index' file of the 4nAlbum module.
This issue has been reported to affect version 0.92 of the software. It is quite likely that other versions are affected as well.
http://www.example.com/phpNukeDirectory/modules/4nalbum/public/nmimage.php?z=[xss code here]
4nAlbum contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the "z" variable upon submission to the "nmimage.php" script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.