4.3
CVSSv2

CVE-2005-1895

Published: 09/06/2005 Updated: 08/03/2011
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.3 allows remote malicious users to inject arbitrary web script or HTML via the border or back parameters to (1) help.php or (2) footer.php.

Vulnerable Product Search on Vulmon Subscribe to Product

flatnuke flatnuke 2.5.3

Exploits

source: wwwsecurityfocuscom/bid/13882/info Multiple input validation vulnerabilities reportedly affect FlatNuke These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in application-critical actions such as generating Web content or loading scripts An attacker may leverage thes ...