Vulnerability Details CVE-2005-0616
Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.7%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2005-0616
-
cpe:2.3:a:postnuke_software_foundation:postnuke_phoenix:0.750
-
cpe:2.3:a:postnuke_software_foundation:postnuke_phoenix:0.760_rc2