CVE-2002-1996 Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter i...
LowCVSS 2.6
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter in index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postnuke software foundation postnuke | = 0.7 | No fix listed |
| postnuke software foundation postnuke | = 0.62 | No fix listed |
| postnuke software foundation postnuke | = 0.63 | No fix listed |
| postnuke software foundation postnuke | = 0.64 | No fix listed |
| postnuke software foundation postnuke | = 0.70 | No fix listed |
| postnuke software foundation postnuke | = 0.71 | No fix listed |
| postnuke software foundation postnuke | = 0.703 | No fix listed |
References
- 20020322 PostNuke Bugged exploit mailing-list patch
- 20020322 Re: PostNuke Bugged mailing-list
- sourceforge.net
- postnuke-modules-index-css(8605) patch vdb-entry
- 4350 patch vdb-entry