Unscored CVE-2004-2752 EUVD-2004-2742GHSA-m23p-w4r4-w6qp

Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attack…

Published Nov 14, 2007 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.

References

1008629 vdb-entry
20040102 PostNuke Issues (0.726 && Possibly Older) mailing-list
http://www.gulftech.org/01032004.php