CVE-2005-1049: postnuke_software_foundation postnuke
Vulnerability summary
CVE-2005-1049 is a low (CVSS 2.6) vulnerability in postnuke_software_foundation postnuke. EPSS estimates a 3.54% chance of exploitation in the next 30 days, higher than 89.1% of scored vulnerabilities. 5 public exploits are recorded.
Timeline
- 12-04-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user.php. NOTE: the vendor reports that certain issues could not be reproduced for 760 RC3, or for .750. However, the op/user.php issue exists when the pnAntiCracker setting is disabled.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.54%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.54% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
5 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (secunia.com)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Postnuke_software_foundation1 product
- postnuke0.760_rc3
1 vendor · 1 product
References
10 links- digitalparadox.org/advisories/postnuke.txtX Refsource MISC
- news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679X Refsource MISCPatchVendor Advisory