Unscored CVE-2009-1457 EUVD-2009-1455GHSA-wfh7-j435-xvj4

Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script …

Published Apr 28, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

nex-player-xss(49944) vdb-entry
34594 vdb-entry
34783 third-party-advisory
53779 vdb-entry