关于 CVE-2005-0616 的漏洞信息

1. 漏洞描述
From NVD
Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables.
From 神龙GPT (AIGC)
在PostNuke 0.750和0.760-RC2的下载模块中存在多个跨站点脚本(XSS)漏洞,允许远程攻击者通过(1)程序名称,(2)文件链接,(3)作者名称(4)作者电子邮件地址,(5)文件大小,(6)版本或(7)主页变量 inject任意的网页脚本或HTML。
2. 漏洞评分(CVSS)
From NVD
NVD 暂无评分
From 神龙GPT (AIGC)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
3. 漏洞类别
From NVD
NVD 暂无漏洞类别信息
From 神龙GPT (AIGC)
神龙GPT 暂无漏洞类别信息(请耐心等待)
Reference