CVE

Id
12255  
CVE No.
CVE-2005-1049  
Status
Candidate  
Description
Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user.php. NOTE: the vendor reports that certain issues could not be reproduced for 760 RC3, or for .750. However, the op/user.php issue exists when the pnAntiCracker setting is disabled.  
Phase
Assigned (20050412)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
87867 12255 CVE-2005-1049 BUGTRAQ:20050408 Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3  View
87868 12255 CVE-2005-1049 URL:http://marc.info/?l=bugtraq&m=111298226029957&w=2  View
87869 12255 CVE-2005-1049 MISC:http://digitalparadox.org/advisories/postnuke.txt  View
87870 12255 CVE-2005-1049 MISC:http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff?r1=1.18&r2=1.19  View
87871 12255 CVE-2005-1049 MISC:http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679  View
87872 12255 CVE-2005-1049 BID:13075  View
87873 12255 CVE-2005-1049 URL:http://www.securityfocus.com/bid/13075  View
87874 12255 CVE-2005-1049 BID:13076  View
87875 12255 CVE-2005-1049 URL:http://www.securityfocus.com/bid/13076  View
87876 12255 CVE-2005-1049 OSVDB:15370  View
87877 12255 CVE-2005-1049 URL:http://www.osvdb.org/15370  View
87878 12255 CVE-2005-1049 SECTRACK:1013670  View
87879 12255 CVE-2005-1049 URL:http://securitytracker.com/id?1013670  View
87880 12255 CVE-2005-1049 SECUNIA:14868  View
87881 12255 CVE-2005-1049 URL:http://secunia.com/advisories/14868/  View
87882 12255 CVE-2005-1049 XF:postnuke-adminphp-userphp-xss(20018)  View

Related JVN