Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-1957
postnuke
0.726
xss
vulnerabilities
remote attacks
web script
html
downloads module
web_links module
openwindow.php
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.6%
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the (1) lid and query parameters to the Downloads module, (2) query parameter to the Web_links module, or (3) hlpfile parameter to openwindow.php.
Affected configurations
Node
postnuke_software_foundationpostnukeMatch0.726
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.6%
Related for CVE-2004-1957