VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 21, 2004· Updated Jun 16, 2026

CVE-2004-1957

CVE-2004-1957

Description

Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the (1) lid and query parameters to the Downloads module, (2) query parameter to the Web_links module, or (3) hlpfile parameter to openwindow.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Postnuke/Postnukeinferred2 versions
    = 0.726+ 1 more
    • (no CPE)range: = 0.726
    • (no CPE)range: = 0.726

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.