CVE-2005-2064: Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary w...

Security readout for executives and security teams

ASP Nuke 0.80 has multiple reported cross-site scripting issues in password reset and registration pages. An attacker could submit script or HTML through common form fields, potentially affecting users who view the resulting content. The sources do not provide CVSS, confirmed exploitation, or a named patch. Exposure is likely limited to organizations still running ASP Nuke 0.80, especially internet-facing deployments with forgot_password.asp or register.asp enabled. The source bundle does not identify other affected versions or products. Prioritize as a legacy exposure check, not an emergency unless ASP Nuke 0.80 is still reachable. If present on a public site, plan rapid retirement or containment because the software is very old and the CVE lacks clear vendor remediation details. Mitigation focus: Inventory and retire any ASP Nuke 0.80 deployments where possible.; Check vendor, maintainer, or archive guidance for any fixed release.; Disable or restrict forgot_password.asp and register.asp if not required..

Prepared

Jun 29, 2026, 19:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.