Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-2689

5 documents4 sources
Severity
2.6LOW
EPSS
0.3%
top 44.85%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Postnuke Software Foundation Postnuke
Timeline
PublishedAug 24
Latest updateMay 1

Description

Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML via (1) the moderate parameter to the Comments module or (2) htmltext parameter to html/user.php.

CVSS vector

AV:N/AC:H/C:N/I:P/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-3f8r-8g29-hh32: Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0↗2022-05-01
▶
CVEList
CVE-2005-2689: Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0↗2005-08-24
▶

💥Exploits & PoCs

2
Exploit-DB
PostNuke 0.76 RC4b - 'user.php?htmltext' Cross-Site Scripting↗2005-08-22
▶
Exploit-DB
PostNuke 0.76 RC4b Comments Module - 'moderate' Cross-Site Scripting↗2005-08-22
▶
CVE-2005-2689 (LOW CVSS 2.6) | Multiple cross-site scripting (XSS) | cvebase.io