Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2010-1713
HistoryMay 04, 2010 - 4:00 p.m.

CVE-2010-1713

2010-05-0416:00:35
CWE-89
mitre
web.nvd.nist.gov
26
cve
2010
1713
sql injection
postnuke
0.764
remote attackers
arbitrary commands
sid parameter
news article
modload action

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

27.8%

JSON

SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News article modload action.

Affected configurations

Nvd
Node
postnukepostnukeMatch0.764
VendorProductVersionCPE
postnukepostnuke0.764cpe:2.3:a:postnuke:postnuke:0.764:*:*:*:*:*:*:*

Related

openvas 2
cvelist 1
prion 1
exploitdb 1
nvd 1
openvas
openvas
PostNuke modload Module 'sid' Parameter SQL Injection Vulnerability
2010-05-19 00:00:00
PostNuke modload Module 'sid' Parameter SQL Injection Vulnerability
2010-05-19 00:00:00
cvelist
cvelist
CVE-2010-1713
2010-05-04 15:00:00
prion
prion
Sql injection
2010-05-04 16:00:00
exploitdb
exploitdb
PostNuke 0.764 Module modload - SQL Injection
2010-04-26 00:00:00
nvd
nvd
CVE-2010-1713
2010-05-04 16:00:35

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

27.8%

JSON
Related for CVE-2010-1713
openvas2cvelist1prion1exploitdb1nvd1