Unscored CVE-2005-1778 EUVD-2005-1780GHSA-m8wh-c634-h6mv

Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML v…

Published May 31, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter.

References

20050527 PostNuke Critical SQL Injection and XSS 0.750=>x mailing-list
http://news.postnuke.com/Article2691.html