PostNuke 0.76 RC4b user.php htmltext Parameter XSS

2005-08-22T00:00:00
ID EDB-ID:26188
Type exploitdb
Reporter Maksymilian Arciemowicz
Modified 2005-08-22T00:00:00

Description

PostNuke 0.76 RC4b user.php htmltext Parameter XSS. CVE-2005-2689. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/14635/info
 
PostNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input.
 
This can lead to theft of cookie-based authentication credentials, as well as other types of attacks. 

http://www.example.com/PostNuke-0.760-RC4b/html/user.php?op=edituser&htmltext=<h1>xss