CVE

Id
4912  
CVE No.
CVE-2002-0521  
Status
Candidate  
Description
Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.asp, (2) the message parameter in Post.asp, or (3) a web site URL in profile.asp.  
Phase
Proposed (20020611)  
Votes
ACCEPT(4) Armstrong, Baker, Cole, Frech | NOOP(3) Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
25178 4912 CVE-2002-0521 VULN-DEV:20020409 Security holes in ASP-Nuke  View
25179 4912 CVE-2002-0521 URL:http://online.securityfocus.com/archive/82/266705  View
25180 4912 CVE-2002-0521 CONFIRM:http://www.asp-nuke.com/news.asp?date=20020412&cat=11  View
25181 4912 CVE-2002-0521 MISC:http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt  View
25182 4912 CVE-2002-0521 BID:4481  View
25183 4912 CVE-2002-0521 URL:http://www.securityfocus.com/bid/4481  View
25184 4912 CVE-2002-0521 XF:aspnuke-downloads-post-css(8830)  View
25185 4912 CVE-2002-0521 URL:http://www.iss.net/security_center/static/8830.php  View
25186 4912 CVE-2002-0521 XF:aspnuke-user-profile-css(8831)  View
25187 4912 CVE-2002-0521 URL:http://www.iss.net/security_center/static/8831.php  View
25188 4912 CVE-2002-0521 BID:4477  View

Related JVN