2.6
CVSSv2

CVE-2005-1695

Published: 24/05/2005 Updated: 18/10/2016
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote malicious users to inject arbitrary web script or HTML via the (1) rss_url parameter to magpie_slashbox.php, or the url parameter to (2) magpie_simple.php or (3) magpie_debug.php.

Vulnerable Product Search on Vulmon Subscribe to Product

postnuke software foundation postnuke 0.750

postnuke software foundation postnuke 0.760_rc2

postnuke software foundation postnuke 0.760_rc3