CVE-2006-0802: XSS
Cross-site scripting (XSS) vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magicquotesgpc is enabled, allows remote attackers to inject arbitrary web script or HTML via the language parameter in a missing or translation operation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0802?
CVE-2006-0802 is considered a medium severity vulnerability due to its ability to allow cross-site scripting attacks.
How do I fix CVE-2006-0802?
To fix CVE-2006-0802, upgrade to a version of PostNuke later than 0.761 that does not have this vulnerability.
What type of attack does CVE-2006-0802 allow?
CVE-2006-0802 allows attackers to perform cross-site scripting attacks by injecting malicious web scripts or HTML.
Which versions of PostNuke are affected by CVE-2006-0802?
CVE-2006-0802 affects PostNuke versions up to and including 0.761.
Is magic_quotes_gpc relevant to CVE-2006-0802?
Yes, CVE-2006-0802 is particularly exploitable when magic_quotes_gpc is enabled on affected versions.