Vulnerabilities > CVE-2007-2892 - Unspecified vulnerability in Asp-Nuke 2.0.7
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN asp-nuke
exploit available
Summary
Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | ASP-Nuke 2.0.7 News.ASP Cross Site Scripting Vulnerability. CVE-2007-2892. Webapps exploit for php platform |
| id | EDB-ID:30081 |
| last seen | 2016-02-03 |
| modified | 2007-05-24 |
| published | 2007-05-24 |
| reporter | vagrant |
| source | https://www.exploit-db.com/download/30081/ |
| title | ASP-Nuke 2.0.7 News.ASP Cross-Site Scripting Vulnerability |
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/24135.html
- http://downloads.securityfocus.com/vulnerabilities/exploits/24135.html
- http://osvdb.org/38141
- http://osvdb.org/38141
- http://www.securityfocus.com/bid/24135
- http://www.securityfocus.com/bid/24135
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34769