Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
2.6
CVSSv2

CVE-2005-1049

Published: 02/05/2005 Updated: 11/07/2017
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 270
Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Subscribe to Postnuke Software Foundation

Vulnerability Summary

Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote malicious users to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user.php. NOTE: the vendor reports that certain issues could not be reproduced for 760 RC3, or for .750. However, the op/user.php issue exists when the pnAntiCracker setting is disabled.

Vulnerable Product Search on Vulmon Subscribe to Product

postnuke software foundation postnuke 0.760_rc3

Exploits

Exploit DB: PostNuke Phoenix 0.760 RC3 - 'OP' Cross-Site Scripting
source: wwwsecurityfocuscom/bid/13075/info A remote cross-site scripting vulnerability affects PostNuke This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content An attacker may leverage this issue to have arbitrary script code executed in the b ...
Exploit DB: PostNuke Phoenix 0.760 RC3 - 'Module' Cross-Site Scripting
source: wwwsecurityfocuscom/bid/13076/info A remote cross-site scripting vulnerability affects PostNuke This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content An attacker may leverage this issue to have arbitrary script code executed in the b ...

References

NVD-CWE-Otherhttp://digitalparadox.org/advisories/postnuke.txthttp://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff?r1=1.18&r2=1.19http://www.securityfocus.com/bid/13075http://www.securityfocus.com/bid/13076http://secunia.com/advisories/14868/http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679http://www.osvdb.org/15370http://securitytracker.com/id?1013670http://marc.info/?l=bugtraq&m=111298226029957&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/20018https://nvd.nist.govhttps://www.exploit-db.com/exploits/25366/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895blind SQL injectionCVE-2024-5064CVE-2023-52677CVE-2023-52682CVE-2024-30051CVE-2024-35849remote attackersremote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook