CVE-2004-2007

CVE-2004-2007 describes a cross-site scripting (XSS) vulnerability in modules.php for NukeJokes 1.7 and 2 Beta. The flaw allows remote attackers to inject arbitrary HTML or web script via (1) the cat parameter in CatView or (2) the jokeid parameter in JokeView. This is a client-side script inject...