Lucene search

[email protected]CVE-2002-1996

HistoryJul 14, 2005 - 4:00 a.m.

CVE-2002-1996

2005-07-1404:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1996

cross-site scripting

xss

postnuke 0.71

vulnerability

web script

html

remote attackers

6 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.018 Low

EPSS

Percentile

88.3%

JSON

Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter in index.php.

Affected configurations

NVD

Node

postnuke_software_foundationpostnukeMatch0.7

postnuke_software_foundationpostnukeMatch0.62

postnuke_software_foundationpostnukeMatch0.63

postnuke_software_foundationpostnukeMatch0.64

postnuke_software_foundationpostnukeMatch0.70

postnuke_software_foundationpostnukeMatch0.71

postnuke_software_foundationpostnukeMatch0.703

CPENameOperatorVersion
postnuke_software_foundation:postnukepostnuke software foundation postnukeeq0.7
postnuke_software_foundation:postnukepostnuke software foundation postnukeeq0.62
postnuke_software_foundation:postnukepostnuke software foundation postnukeeq0.63
postnuke_software_foundation:postnukepostnuke software foundation postnukeeq0.64
postnuke_software_foundation:postnukepostnuke software foundation postnukeeq0.70
postnuke_software_foundation:postnukepostnuke software foundation postnukeeq0.71
postnuke_software_foundation:postnukepostnuke software foundation postnukeeq0.703

CPE	Name	Operator	Version
postnuke_software_foundation:postnuke	postnuke software foundation postnuke	eq	0.7
postnuke_software_foundation:postnuke	postnuke software foundation postnuke	eq	0.62
postnuke_software_foundation:postnuke	postnuke software foundation postnuke	eq	0.63
postnuke_software_foundation:postnuke	postnuke software foundation postnuke	eq	0.64
postnuke_software_foundation:postnuke	postnuke software foundation postnuke	eq	0.70
postnuke_software_foundation:postnuke	postnuke software foundation postnuke	eq	0.71
postnuke_software_foundation:postnuke	postnuke software foundation postnuke	eq	0.703

References

archives.neohapsis.com/archives/bugtraq/2002-03/0288.html

archives.neohapsis.com/archives/bugtraq/2002-03/0299.html

sourceforge.net/tracker/index.php?func=detail&aid=524777&group_id=27927&atid=392228

www.iss.net/security_center/static/8605.php

www.securityfocus.com/bid/4350

6 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.018 Low

EPSS

Percentile

88.3%

JSON

Related for CVE-2002-1996

cvelist1 nvd1