Secunia
Login
|
|
CVE Reference: CVE-2006-0802 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-0802 |
|
|
Description: Cross-site scripting (XSS) vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is enabled, allows remote attackers to inject arbitrary web script or HTML via the language parameter in a missing or translation operation. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/24823 SREASON http://securityreason.com/securityalert/454 SAID Secunia Advisory: SA18937 MISC http://securityreason.com/securityalert/454 FULLDISC http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html CONFIRM http://news.postnuke.com/index.php?name=News&file=article&sid=2754 BID 16752 |
|
| Return to the previous page. |
