CVE-2004-2325

CVE-2004-2325 describes a cross-site scripting (XSS) vulnerability in the EditModule.aspx page of DotNetNuke (formerly IBuySpy Workshop), affecting versions 1.0.6 through 1.0.10d. The flaw allows remote attackers to inject arbitrary web script or HTML. The provided documents identify the affected...