medium5.0Public exploit code
CVE-2005-2064
Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to for…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ASPNuke 0.80 - 'register.asp' Multiple Cross-Site Scripting Vulnerabilities2005-06-27 · webapps · asp · Verified
- ASPNuke 0.80 - 'forgot_password.asp?email' Cross-Site Scripting2005-06-27 · webapps · asp · Verified
Impact
Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to forgot_password.asp, or the (2) FirstName, (3) LastName, (4) Username, (5) Password, (6) Address1, (7) Address2, (8) City, (9) ZipCode, (10) Email parameter to register.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asp-Nuke | Asp-Nuke | Version 0.80 |