CVE-2004-2325

CVE-2004-2325

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to inject arbitrary web script or HTML.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html http://secunia.com/advisories/10747 https://exchange.xforce.ibmcloud.com/vulnerabilities/14974 http://www.osvdb.org/3751 http://www.securityfocus.com/bid/9518