CVE-2004-1949

SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset parameter to changeinfo.php in the Your_Account module.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-f4q8-xff2-rhrg

SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute...

References (20)

• http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020154.html Exploit
• http://marc.info/?l=bugtraq&m=108256503718978&w=2
• http://news.postnuke.com/Article2580.html Vendor Advisory
• http://secunia.com/advisories/11386
• http://securitytracker.com/id?1009801
• http://www.osvdb.org/5368
• http://www.osvdb.org/5369
• http://www.securityfocus.com/bid/10146 Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15869
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15875
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020154.html Exploit
• http://marc.info/?l=bugtraq&m=108256503718978&w=2
• http://news.postnuke.com/Article2580.html Vendor Advisory
• http://secunia.com/advisories/11386
• http://securitytracker.com/id?1009801