low2.6
CVE-2001-1521
Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter.
Impact
Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postnuke Software Foundation | Postnuke | Versions 0.62, 0.63, 0.64 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/245691
- http://online.securityfocus.com/archive/82/243545
- http://www.iss.net/security_center/static/7654.php
- http://www.securityfocus.com/bid/3609
- http://online.securityfocus.com/archive/1/245691
- http://online.securityfocus.com/archive/82/243545
- http://www.iss.net/security_center/static/7654.php
- http://www.securityfocus.com/bid/3609