← Database

CVE-2005-2689

LOW CVSS: 2.6 Published: 2005-08-24 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML via (1) the moderate parameter to the Comments module or (2) htmltext parameter to html/user.php.

Affected Platforms

Postnuke Software Foundation Postnuke

Weakness Type

NVD-CWE-Other

References