|
|
CVE Reference: CVE-2005-1049 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2005-1049 |
|
|
Description: Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user.php. NOTE: the vendor reports that certain issues could not be reproduced for 760 RC3, or for .750. However, the op/user.php issue exists when the pnAntiCracker setting is disabled. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/20018 ST 1013670 SAID Secunia Advisory: SA14868 OSVDB 15370 MISC http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679 http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff?r1=1.18&r2=1.19 http://digitalparadox.org/advisories/postnuke.txt BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=111298226029957&w=2 BID 13075 13076 |
|
| Return to the previous page. |
