CVE-2007-1494

Cross-site scripting (XSS) vulnerability in NukeSentinel before 2.5.06 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "filters for https:// and http://".

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-03-16

Last modified

2024-08-07

Affected products

• Nukesentinel (Nukescripts)

References

• http://osvdb.org/35078
• http://www.nukescripts.net/modules.php?name=Downloads&op=getit&lid=1055