Postnuke Software Foundation : Security Vulnerabilities, CVEs, Published In 2004 (Sql injection)
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
Max CVSS
7.5
EPSS Score
0.76%
Published
2004-12-31
Updated
2017-07-11
SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset parameter to changeinfo.php in the Your_Account module.
Max CVSS
7.5
EPSS Score
1.27%
Published
2004-12-31
Updated
2017-07-11
SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
Max CVSS
6.8
EPSS Score
0.38%
Published
2004-12-31
Updated
2017-07-29
3 vulnerabilities found