CVE-2005-4075

CVE-2005-4075 corresponds to multiple cross-site scripting (XSS) vulnerabilities in index.cfm of CF_Nuke 4.6 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the news sector parameters (1) topic and (2) newsid, and the links sector parameter (3) cat. The d...