CVE-2005-1695: XSS

Published May 24, 2005

Updated

Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) rssurl parameter to magpieslashbox.php, or the url parameter to (2) magpiesimple.php or (3) magpiedebug.php.

Affected Software

3 affected components

Postnuke Software Foundation Postnuke=0.760_rc3

Postnuke Software Foundation Postnuke=0.760_rc2

Postnuke Software Foundation Postnuke=0.750

Remediation

Patch Available

http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691

Event History

May 24, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1695?

CVE-2005-1695 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2005-1695?

To fix CVE-2005-1695, you should upgrade PostNuke to a version that is not affected, such as any version later than 0.760.

What software is affected by CVE-2005-1695?

CVE-2005-1695 affects PostNuke versions 0.750, 0.760RC2, and 0.760RC3.

Are there any known exploits for CVE-2005-1695?

Yes, there are known exploits that leverage the cross-site scripting vulnerabilities in CVE-2005-1695.

What impact can CVE-2005-1695 have on my website?

CVE-2005-1695 can allow attackers to inject arbitrary scripts into web pages viewed by users, potentially leading to data theft or session hijacking.