Approved changes feed: RSS · Atom
cpe:2.3:a:postnuke_software_foundation:postnuke:0.74:*:*:*:*:*:*:*
part: a version: 0.74 update: *
| Vendor | Postnuke Software Foundation (21b6129d-c94c-5024-82e8-294af50c7a1c) |
|---|---|
| Product | Postnuke (75d3baf4-73b7-56b8-ac69-6cbff3807dd9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-0800 |
vulnerable | 2026-06-08 04:48:55.317485 |
Details available
Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML tags with a trailing "<" character, which is interpreted as a ">" character by some web browsers but bypasses the blacklist protection in (1) the pnVarCleanFromInput function in pnAPI.php, (2) the pnSecureInput function in pnAntiCracker.php, and (3) the htmltext parameter in an edituser operation to user.php.
Published: 2006-02-20T22:00:00.000Z
Updated: 2024-08-07T16:48:56.198Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.