CVE-2008-1591

The CVE-2008-1591 issue affects PostNuke 0.764 and earlier, where pnVarPrepForStore does not sanitize input when magic_quotes_runtime is enabled. This allows remote attackers to perform SQL injection and execute arbitrary SQL commands via server variables, demonstrated via the CLIENT_IP (HTTP_CLI...

CVE-2008-1591

creationtimestamp| type| source ---|---|--- 2008-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5292...