Beveiligingsadvies

CVE-2004-2294

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-08-04 04:00:00

Laatst bijgewerkt 2024-09-17 00:41:32

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences in the text parameter, which is checked for dangerous sequences before it is canonicalized, leading to a cross-site scripting (XSS) vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗