CVE-2004-2752 in PostNuke

الملخص

بحسب MITRE

Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 13/11/2007
• إفشاء: 31/12/2004
• الاعتدال: تمت الموافقة
• إدخال: VDB-23616
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 4.3 (VulDB)
• EPSS: 0.01022
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Lawfirm, Agriculture, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-2752
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-2752
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-2752/