vendor:
htmltonuke
by:
SecurityFocus
9.3
CVSS
HIGH
htmltonuke Remote Code Execution
94
CWE
Product Name: htmltonuke
Affected Version From: 1
Affected Version To: 1
Patch Exists: YES
Related CWE: CVE-2002-1490
CPE: o:htmltonuke:htmltonuke:1.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2002
htmltonuke Remote Code Execution
A vulnerability has been reported in htmltonuke, a web-based content management system, that may result in web code execution in the browser of visiting users. This code would be executed in the security context of the site hosting the vulnerable script. An attacker can exploit this vulnerability by crafting a malicious URL and sending it to a user. The URL would contain a malicious script that would be executed in the user's browser.
Mitigation:
Upgrade to the latest version of htmltonuke.