Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Postnuke Software Foundation Subscribe
Filtered by product Postnuke Phoenix
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-0616 1 Postnuke Software Foundation 1 Postnuke Phoenix 2016-10-17 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables.