CVE-2005-1696
Last modified
CVE-2005-1696 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) skin or (2) paletteid parameter to demo.php in the Xanthia module, or (3) the serverName parameter to config.php in the Multisites (aka NS-Multisites) module.. EPSS estimates a 0.90% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) skin or (2) paletteid parameter to demo.php in the Xanthia module, or (3) the serverName parameter to config.php in the Multisites (aka NS-Multisites) module.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Postnuke Software Foundation | Postnuke | 0.750 |
| Postnuke Software Foundation | Postnuke | 0.760_rc3 |
References
- http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691Patch, Vendor Advisory
- http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-1696?
How severe is CVE-2005-1696?
How do I fix CVE-2005-1696?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-1690Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2005-1691Directory traversal vulnerability in Internet Graphics Serve…
- CVE-2005-1692Format string vulnerability in gxine 0.4.1 through 0.4.4, an…
- CVE-2005-1693Integer overflow in Computer Associates Vet Antivirus librar…
- CVE-2005-1694Multiple SQL injection vulnerabilities in Xanthia.php in the…
- CVE-2005-1695Multiple cross-site scripting (XSS) vulnerabilities in the R…
- CVE-2005-1697The RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows…
- CVE-2005-1698PostNuke 0.750 and 0.760RC3 allows remote attackers to obtai…
- CVE-2005-1699Directory traversal vulnerability in pnadminapi.php in the X…
- CVE-2005-1700SQL injection vulnerability in pnadmin.php in the Xanthia mo…
- CVE-2005-1701SQL injection vulnerability in PortailPHP 1.3 allows remote …
- CVE-2005-1702Format string vulnerability in Warrior Kings: Battles 1.23 a…
Are you affected by CVE-2005-1696?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST