Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-2752
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
61.0%
Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.
Affected configurations
Node
postnuke_software_foundationpostnukeMatch0.726
| Vendor | Product | Version | CPE |
|---|---|---|---|
| postnuke_software_foundation | postnuke | 0.726 | cpe:2.3:a:postnuke_software_foundation:postnuke:0.726:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
61.0%
Related for NVD:CVE-2004-2752