medium4.3
CVE-2004-2752
Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitr…
Impact
Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postnuke Software Foundation | Postnuke | Version 0.726 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1008629
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html
- http://www.gulftech.org/01032004.php
- http://securitytracker.com/id?1008629
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html
- http://www.gulftech.org/01032004.php