CVE-2004-2752

2007-11-1402:00:00

mitre

www.cve.org

postnuke

cross-site scripting

downloads module

vulnerability

remote attackers

html

web script

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

61.0%

JSON

Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.

References

securitytracker.com/id?1008629

www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html

www.gulftech.org/01032004.php