postnuke software foundation postnuke 0.761 vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote malicious users to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in d...

Postnuke Software Foundation Postnuke 0.76 Rc4b Postnuke Software Foundation Postnuke 0.760 Rc2 Postnuke Software Foundation Postnuke 0.76 Rc4 Postnuke Software Foundation Postnuke 0.76 Rc4a Postnuke Software Foundation Postnuke 0.762 Postnuke Software Foundation Postnuke 0.763 Postnuke Software Foundation Postnuke 0.760 Rc3 Postnuke Software Foundation Postnuke 0.760 Rc4 Postnuke Software Foundation Postnuke 0.761 Postnuke Software Foundation Postnuke 0.761a

Interpretation conflict in PostNuke 0.761 and previous versions allows remote malicious users to conduct cross-site scripting (XSS) attacks via HTML tags with a trailing "<" character, which is interpreted as a ">" character by some web browsers but bypa...

Postnuke Software Foundation Postnuke 0.71 Postnuke Software Foundation Postnuke 0.72 Postnuke Software Foundation Postnuke 0.76 Rc4 Postnuke Software Foundation Postnuke 0.76 Rc4a Postnuke Software Foundation Postnuke 0.63 Postnuke Software Foundation Postnuke 0.64 Postnuke Software Foundation Postnuke 0.73 Postnuke Software Foundation Postnuke 0.74 Postnuke Software Foundation Postnuke 0.761a Postnuke Software Foundation Postnuke 0.62 Postnuke Software Foundation Postnuke 0.721 Postnuke Software Foundation Postnuke 0.726.3 Postnuke Software Foundation Postnuke 0.76 Rc4b Postnuke Software Foundation Postnuke 0.761 Postnuke Software Foundation Postnuke 0.7 Postnuke Software Foundation Postnuke 0.70 Postnuke Software Foundation Postnuke 0.703 Postnuke Software Foundation Postnuke 0.75 Postnuke Software Foundation Postnuke 0.75 Rc3

1 EDB exploit

SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and previous versions, when magic_quotes_gpc is off, allows remote malicious users to execute arbitrary SQL commands via the language parameter to admin.php.

Postnuke Software Foundation Postnuke

1 EDB exploit

Cross-site scripting (XSS) vulnerability in the NS-Languages module for PostNuke 0.761 and previous versions, when magic_quotes_gpc is enabled, allows remote malicious users to inject arbitrary web script or HTML via the language parameter in a missing or translation operation.

Postnuke Software Foundation Postnuke

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP prior to 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote ma...

Moodle Moodle 1.5.3 Postnuke Software Foundation Postnuke 0.761 The Cacti Group Cacti 0.8.6g Mantis Mantis 0.19.4 Mantis Mantis 1.0.0 Rc4 John Lim Adodb 4.66 John Lim Adodb 4.68

1 EDB exploit

The server.php test script in ADOdb for PHP prior to 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote malicious use...

Postnuke Software Foundation Postnuke 0.761 John Lim Adodb 4.66 The Cacti Group Cacti 0.8.6g Mantis Mantis 1.0.0 Rc4 John Lim Adodb 4.68 Moodle Moodle 1.5.3 Mantis Mantis 0.19.4 Mediabeez Mediabeez

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook