CVE-2004-2294

2004-12-31T05:00:00
ID CVE-2004-2294
Type cve
Reporter cve@mitre.org
Modified 2008-09-05T20:43:00

Description

Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences in the text parameter, which is checked for dangerous sequences before it is canonicalized, leading to a cross-site scripting (XSS) vulnerability.