Lucene search
FreeBSD35F2679F-52D7-11DB-8F1A-000A48049292HistorySep 29, 2006 - 12:00 a.m.
postnuke -- admin section SQL injection
2006-09-2900:00:00
vuxml.freebsd.org
10
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.011
Percentile
84.8%
ISS X-Force reports:
PostNuke is vulnerable to SQL injection. A remote attacker
could send specially-crafted SQL statements to the admin
section using the hits parameter, which could allow the
attacker to view, add, modify or delete information in the
back-end database.
Related
openvas
openvas
FreeBSD Ports: postnuke
2008-09-04 00:00:00
FreeBSD Ports: postnuke
2008-09-04 00:00:00
cve
cve
CVE-2006-5121
2006-10-03 04:03:00
cvelist
cvelist
CVE-2006-5121
2006-10-02 20:00:00
nvd
nvd
CVE-2006-5121
2006-10-03 04:03:00
nessus
nessus
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.011
Percentile
84.8%
Related for 35F2679F-52D7-11DB-8F1A-000A48049292